Cribl acquires CardinalOps in roughly $100M push into security operations

Cribl, a telemetry-management company, said on July 14 that it will acquire CardinalOps, an Israeli detection-engineering startup, in a deal estimated at roughly $100 million. Cribl did not officially disclose the purchase price.

The acquisition pushes Cribl beyond data pipelines and into security operations, adding CardinalOps’ agentic detection-engineering technology meant to widen threat coverage, cut security-data costs and help customers move off legacy security information and event management, or SIEM, systems.

The move lands as both companies argue that security teams are drowning in alerts rather than short on tools. CardinalOps was founded in early 2020 by Chief Executive Michael Mumcuoglu and Chief Technology Officer Yair Manor, both veterans of the Israel Defense Forces’ Unit 8200 signals-intelligence corps. The roughly 25-person company, mostly based in Israel, had raised about $40 million. Cribl will open a new office in Tel Aviv as part of the deal.

“Security teams do not need more disconnected tools,” Cribl CEO Clint Sharp said. “They need a better way to turn telemetry into effective detections and outcomes.”

CardinalOps described the same gap. “Too many security teams have good data, powerful tools, and endless alerts, but no real confidence that they are actually protected,” Mumcuoglu said.

The financial terms rest on outside estimates rather than a disclosed figure, and neither company detailed an integration timeline or how CardinalOps’ technology will be priced inside Cribl’s platform.