SentinelOne Moves To Acquire Observo Ai In Security Data Play

Cybersecurity firm SentinelOne has confirmed plans to acquire Observo Ai, a data streaming platform specialising in Ai-native telemetry pipelines. The move is intended to reshape how Security Operations Center (SOC) teams collect and act on security data.

Tackling The Limits Of Legacy SIEM

SentinelOne said the acquisition came as enterprises continued to struggle with the cost and complexity of legacy Security Information and Event Management (SIEM) systems. These tools, built for an earlier generation of threats, often leave organisations with incomplete visibility and delayed responses.

“Security is, at its heart, a data problem, and legacy, rules-based data pipeline platforms simply weren’t built for today’s ever-growing attack surface,” said Tomer Weingarten, Chief Executive and co-founder of SentinelOne. “Observo Ai is miles ahead of its rivals and will uniquely benefit customers with an Ai-native data architecture — one that is open by design, intelligent by default, and built for the scale and speed needed for autonomous security operations.”

What Observo Ai Brings

Observo Ai operates a real-time telemetry pipeline designed to ingest, enrich and route data before it reaches storage or analytics systems. Its technology promises to reduce data volumes by up to 80 per cent while retaining the ability to rehydrate full logs on demand.

The system is built on open formats such as OCSF, JSON, OTLP and Parquet, allowing integration with SIEMs, data lakes and other security platforms. It also features natural language querying, anomaly detection, and context-aware enrichment, aimed at helping both human analysts and Ai agents respond more effectively.

Gurjeet Arora, Chief Executive and co-founder of Observo Ai, said joining SentinelOne would help scale its reach.

“Observo Ai was born in the Ai and cloud era to help security and DevOps teams tackle previously unimaginable data problems,” Arora said. “Bringing together Observo’s Ai-native data pipeline with the world’s best Ai-native cybersecurity platform is a huge win for customers. As part of SentinelOne, we have an opportunity to define the future of autonomous security and solve the data problems that make that possible.”

Towards Autonomous SOC Operations

SentinelOne said the acquisition would accelerate its work on what it describes as the Autonomous SOC, where data enrichment and decision-making can be handled in real time by Ai agents working alongside human teams.

The company expects Observo Ai’s technology to enhance its Singularity Platform by optimising how data is enriched and filtered before reaching storage. This would reduce costs while improving detection and response times.

Weingarten said the integration would also provide customers with choice. “We can deliver significant new customer and partner value by allowing for fast and seamless data routing into our Ai SIEM, or any other destination,” he said.

Industry Implications

The announcement highlights the growing shift in cybersecurity from rules-based monitoring to real-time, Ai-supported decision-making. With enterprises generating larger volumes of telemetry across cloud, endpoint and identity systems, the demand for more efficient data handling is increasing.

SentinelOne said the combined offering would provide SOC teams with faster detection, lower costs and simplified operations. The technology is expected to appeal to enterprises facing high storage bills and operational delays caused by older ingestion models.

“This acquisition marks the next phase in SentinelOne’s vision to build the most autonomous, open, Ai-powered security platform in the industry,” Weingarten said.

The deal is expected to close following regulatory approvals, with SentinelOne planning to integrate Observo Ai’s technology into its existing product stack later this year.

Last Updated on September 9, 2025 by Nick Ross