San Francisco | Tel Aviv: U.S.-based telemetry management company Cribl has announced the acquisition of Israeli cybersecurity startup CardinalOps, strengthening its artificial intelligence-driven cybersecurity platform and expanding its global operations.
While the companies did not officially disclose the financial terms of the transaction, industry estimates value the deal at approximately $100 million.
The acquisition is expected to enhance Cribl’s cybersecurity offerings by integrating CardinalOps’ AI-powered detection engineering technology into its telemetry platform, helping organizations improve threat detection, optimize security operations, and reduce operational complexity.
CardinalOps Brings AI-Powered Detection Engineering to Cribl
Founded in 2020, CardinalOps specializes in agentic AI-powered detection engineering solutions that help Security Operations Centers (SOCs) continuously assess, improve, and automate threat detection coverage.
Its platform enables enterprises to identify security gaps, reduce alert fatigue, and strengthen cyber resilience across increasingly complex IT environments.
With the acquisition, Cribl plans to integrate these capabilities into its AI Platform for Telemetry, providing customers with more comprehensive cybersecurity solutions.
Expanding Cribl’s Cybersecurity Platform
The addition of CardinalOps’ technology will enable Cribl to expand beyond telemetry management by offering advanced detection engineering capabilities that improve security visibility and operational efficiency.
The combined platform will help organizations:
- Strengthen threat detection capabilities
- Improve Security Operations Center (SOC) performance
- Lower security data management costs
- Reduce alert noise
- Accelerate incident response
- Optimize cybersecurity workflows
Cribl also aims to provide enterprises with a more flexible alternative to traditional Security Information and Event Management (SIEM) platforms by leveraging AI and open data infrastructure.
Cribl to Expand Operations in Israel
As part of the acquisition, CardinalOps’ employees will join Cribl, which also announced plans to establish a new office in Tel Aviv.
The expansion reflects Cribl’s long-term commitment to Israel’s cybersecurity ecosystem, widely recognized as one of the world’s leading innovation hubs for cyber technologies.
The new office is expected to support product development, engineering, and continued innovation in AI-powered cybersecurity solutions.
Leadership Commentary
Commenting on the acquisition, Clint Sharp, Co-founder and CEO of Cribl, said:
“Security teams do not need more disconnected tools. They need a better way to turn telemetry into effective detections and outcomes. CardinalOps strengthens our AI Platform for Telemetry by adding deep detection engineering capabilities to the open data infrastructure our customers already rely on and serves as the foundation for a complete, open alternative to the SIEM stack they’ve outgrown.”
Michael Mumcuoglu, Co-founder and CEO of CardinalOps, added:
“Too many security teams have good data, powerful tools and endless alerts, but no real confidence that they are actually protected. We built CardinalOps so SOC teams could understand and improve coverage instead of just managing more noise. Joining Cribl lets us bring that directly into the telemetry layer and build what the market needs next: an open, AI-native alternative to the SIEM, where customers pay for better protection, not more data volume. That’s what we’re building next.”
Founded by Cybersecurity Veterans
CardinalOps was established by Michael Mumcuoglu and Yair Manor, both former members of the Israeli Defense Forces’ (IDF) Unit 8200, one of Israel’s elite intelligence and cybersecurity units.
Before launching CardinalOps, the founders built successful cybersecurity companies that were later acquired by major technology firms, including Palo Alto Networks and Microsoft.
Their experience in cybersecurity innovation has positioned CardinalOps as an emerging player in AI-driven security operations.
Growing Demand for AI-Native Cybersecurity
The acquisition comes as organizations worldwide continue investing in AI-powered cybersecurity solutions to manage increasingly sophisticated cyber threats.
With enterprises generating massive volumes of security telemetry, traditional SIEM platforms are facing growing challenges related to scalability, cost, and operational complexity.
AI-driven detection engineering platforms are emerging as a critical component of modern cybersecurity strategies by enabling organizations to automate threat detection, improve coverage, and respond more effectively to evolving cyber risks.
The Cribl-CardinalOps combination positions the company to compete more aggressively in the rapidly expanding cybersecurity and AI security operations market.
Ruchi Kumar is the associate editor at Entrepreneur News Network and TVW News India, where she leads editorial strategy, brand storytelling, and startup ecosystem coverage. With a strong focus on innovation, business, and marketing insights, he curates impactful narratives that spotlight India’s evolving entrepreneurial landscape. She has written extensively on fintech, AI and emerging startups.