Exabeam

Analytics

Exabeam is a cybersecurity company founded in 2013 by Domingo Mihovilovic, Sylvain Gil, and Nir Polak, headquartered in Foster City, California.

Reviewed by 7wData
Share Email

On this page

Profile

AI-driven security log management and threat detection platform that helps security operations centers monitor, investigate, and respond to threats from users, systems, and autonomous AI agents.

Exabeam is a cybersecurity company founded in 2013 by Domingo Mihovilovic, Sylvain Gil, and Nir Polak, headquartered in Foster City, California. The company has raised $390 million across seven funding rounds, with a Series F of $200 million in June 2021 that valued it at $2.4 billion. In July 2024, Exabeam completed a landmark merger with LogRhythm, a Thoma Bravo portfolio company, combining two of the industry's largest independent SIEM (Security Information and Event Management) providers.

The combined company went on to ship over 400 AI-driven product features within a year, positioning itself as a leader in AI-driven security operations. In October 2025, Ponte Partners acquired the Exabeam portfolio as part of a secondary investment transaction, marking the company's third ownership change in 18 months. Pete Harteveld became CEO in October 2025, replacing Chris O'Malley who retired after three years; Harteveld had previously served as Chief Revenue Officer and played a key role integrating the LogRhythm acquisition.

The company has achieved double-digit bookings growth on both quarterly and annual bases in recent periods. Exabeam was named a Leader in the 2025 Gartner Magic Quadrant for SIEM for the sixth time and was recognized as Google Partner of the Year for Security Analytics in 2024. The company's core offering, Exabeam New-Scale Fusion, combines real-time log aggregation with AI-driven analytics, user and entity behavior analysis, and automated response capabilities.

Recent product expansion includes Agent Behavior Analytics (ABA) launched in 2025 to detect threats from autonomous AI agents including Google Gemini, OpenAI ChatGPT, and Microsoft Copilot. The company has named customers including NTT DATA, NASA, Dayforce, Under Armour, and organizations across financial services, government, healthcare, and manufacturing sectors. However, Exabeam has undergone significant workforce reductions: a 20 percent cut in October 2023, an additional 94 layoffs in January 2024, and a 30 percent reduction following the LogRhythm merger in July 2024.

Track Exabeam and 240+ vendors.

48k+ subscribers read the daily AI & data note. One email, both newsletters. Unsubscribe anytime.

Products by Exabeam

Who buys this

  • Financial services organizations running centralized SOCs for regulatory compliance
  • Government agencies and defense contractors managing insider threat detection
  • Large enterprises with distributed security teams monitoring multiple data centers and cloud environments
  • Healthcare systems protecting patient data and operational technology networks

Publicly disclosed clients

  • NTT DATA
  • NASA
  • Under Armour
  • Dayforce
  • A1 Hrvatska
  • Assurity
  • BRAC Bank

Strengths and what to watch

Strengths

  • Consecutive Gartner Leadership placement (six times in SIEM quadrant, 15 total including LogRhythm legacy); recognized for execution on vision and completeness of platform
  • First-to-market AI agent behavior monitoring capabilities (Google Gemini, ChatGPT, Copilot) as insider threats evolve; expanded detection library by 5x in 2026
  • Unlimited data lake architecture and flexible pricing model that appeal to large, data-heavy enterprises; NTT DATA cited pricing advantage after deploying across 50+ use cases across three continents

Watch for

  • Three ownership changes in 18 months (Thoma Bravo → Ponte Partners, October 2025) signal potential strategic repositioning or liquidity seeking; leadership transition in October 2025 (new CEO Harteveld) follows organizational restructuring
  • Cumulative workforce reductions of 50+ percent across three tranches (Oct 2023, Jan 2024, July 2024 post-merger) raise questions about integration execution, culture, and retention of institutional knowledge
  • LogRhythm merger integration and product roadmap consolidation ongoing; customer migration from LogRhythm SIEM to Exabeam New-Scale platform completion timeline and churn risk unknown

Recent moves

Key Information

Industry
Analytics
Founded
2013
Employees
877
Headquarters
Foster City, California
Country
United States

Frequently Asked Questions

What is Exabeam?

Exabeam is an AI-driven security log management and threat detection platform for security operations centers. It combines real-time log aggregation, AI-powered analytics, user and entity behavior analysis, and automated response capabilities. Founded in 2013, it's recognized as a leader in SIEM solutions.

What does Exabeam New-Scale Fusion do?

Exabeam New-Scale Fusion is the company's core offering, combining real-time log aggregation with AI-driven analytics, user and entity behavior analysis, and automated response capabilities. It helps organizations detect, investigate, and respond to threats from users, systems, and autonomous agents across their infrastructure.

How does Exabeam detect AI agent threats?

In 2025, Exabeam launched Agent Behavior Analytics to detect threats from autonomous AI agents, including Google Gemini, OpenAI ChatGPT, and Microsoft Copilot. This capability monitors unauthorized or malicious use of AI tools as insider threats, expanding Exabeam's detection library by five times in 2026.

What happened with the LogRhythm merger?

In July 2024, Exabeam completed a landmark merger with LogRhythm, combining two of the industry's largest independent SIEM providers. The combined company shipped over 400 AI-driven product features within a year. However, workforce reductions of 30 percent followed, raising questions about integration execution.

Who are Exabeam's customers?

Exabeam serves financial services, government, healthcare, and manufacturing organizations. Named customers include NTT DATA, NASA, Under Armour, and Dayforce. The platform appeals to enterprises running centralized security operations centers, managing insider threats, and monitoring distributed cloud and data center environments.

What recent leadership changes occurred at Exabeam?

In October 2025, Pete Harteveld became CEO of Exabeam, replacing Chris O'Malley who retired after three years. Harteveld, previously Chief Revenue Officer, led the LogRhythm integration. The same month, Ponte Partners acquired Exabeam, marking the company's third ownership change in eighteen months.

How Exabeam compares

Direct head-to-head against 3 competitors. Picked by 7wData.

This company

Exabeam

Positioning
AI-driven security log management and threat detection platform that helps security operations centers monitor, investigate, and respond to threats from users, systems, and autonomous AI agents.
Customer segments
Financial services organizations running centralized SOCs for regulatory compliance
Strengths
Consecutive Gartner Leadership placement (six times in SIEM quadrant, 15 total including LogRhythm legacy); recognized for execution on vision and completeness of platform
Watch for
Three ownership changes in 18 months (Thoma Bravo → Ponte Partners, October 2025) signal potential strategic repositioning or liquidity seeking; leadership transition in October 2025 (new CEO Harteveld) follows organizational restructuring
Recent moves
Exabeam expands AI agent behavior analytics to detect threats across ChatGPT, Copilot, and Gemini

Cisco Splunk

Positioning
Cisco-owned SIEM and observability platform targeting enterprises requiring unified log management, threat detection, and network telemetry in one stack.
Customer segments
Large enterprises, federal agencies, and regulated industries; buyers are CISOs and SOC directors on hybrid or multi-cloud infrastructure.
Strengths
Ranked highest in Ability to Execute in the 2025 Gartner SIEM MQ for 11 consecutive placements; broadest SPL-based custom detection library.
Watch for
Data ingestion pricing draws consistent enterprise complaints; Cisco post-acquisition roadmap alignment with legacy Splunk on-prem deployments remains unresolved.
Recent moves
Released Splunk Enterprise Security 8.3 in November 2025, unifying SIEM, SOAR, UEBA, and threat intelligence under a single analyst interface.

Microsoft Sentinel

Positioning
Cloud-native SIEM embedded in the Microsoft Defender unified platform, sold primarily to organizations already running Microsoft E5 security infrastructure.
Customer segments
Azure-centric enterprises and Microsoft E5 licensees; buyers are SOC managers consolidating tooling within an existing Microsoft security stack.
Strengths
Native, connector-free integration across Defender, Entra, and Purview; no third-party SIEM matches this coverage depth for Microsoft-stack organizations.
Watch for
Full capability requires Microsoft E5 licensing; customers report measurable vendor lock-in and high migration friction when evaluating alternative SIEM vendors.
Recent moves
In July 2025, Microsoft announced mandatory migration of all Sentinel instances from the Azure portal to the Defender portal by July 2026.

Palo Alto Networks Cortex XSIAM

Positioning
Integrated SecOps platform combining SIEM, XDR, SOAR, and attack surface management, targeting enterprises consolidating and replacing multiple point security tools.
Customer segments
Large enterprises with $1M-plus annual security budgets; buyers are CISOs seeking SOC consolidation and migrating from legacy SIEM platforms.
Strengths
Unifies EDR, SIEM, SOAR, and attack surface management on a single data layer; documented enterprise deployments reduced median MTTR to minutes.
Watch for
Pricing floor above $200K annually limits mid-market access; IBM QRadar migrators have cited platform complexity and longer-than-expected onboarding timelines.
Recent moves
Launched Cortex AgentiX in October 2025, an agentic AI platform for building, deploying, and governing enterprise security automation agents.

Sources

  1. www.exabeam.com — Company mission, product portfolio (New-Scale Fusion, Nova, UEBA, ABA, SOAR, TDIR), target customers and industries
  2. www.exabeam.com — Company history, founding in 2013, founder names, core mission on behavior intelligence, leadership team details, company values and culture awards
  3. techcrunch.com — LogRhythm-Exabeam merger announcement details, timeline (Q3 2024), strategic rationale, prior funding amounts, market context for SIEM consolidation
  4. www.thomabravo.com — CEO appointment (Pete Harteveld, October 2025), company financial performance metrics (double-digit bookings growth), 400+ AI innovations shipped, quarterly product release cadence
  5. www.exabeam.com — 2025 Gartner Magic Quadrant SIEM Leadership designation (6th time), combined 15 Leader placements with LogRhythm legacy, recent innovations (Nova, Cribl partnership, benchmarking features)
  6. www.exabeam.com — Named customer NTT DATA case study, deployment across 50+ use cases, geographic expansion (North America, Europe, Asia-Pacific), customer impact on pricing model
  7. www.businesswire.com — AI agent threat detection expansion (September 2025), Google Gemini integration, insider threat capabilities for autonomous agents
  8. www.globenewswire.com — Ponte Partners acquisition (October 2025), portfolio companies (Fandom, Exabeam, ExteNet), secondary investment strategy and liquidity event
  9. www.bankinfosecurity.com — Workforce reduction history: October 2023 (20% cut), January 2024 (94 employees), July 2024 post-merger (30% reduction)