Gravwell
Gravwell, founded by Corey Thuen and Kris Watts, is a Minneapolis-based data analytics and security platform specializing in high-volume machine data processing.
Profile
Provides a security data platform that collects and analyzes machine-generated logs, network traffic, and operational technology data.
Gravwell, founded by Corey Thuen and Kris Watts, is a Minneapolis-based data analytics and security platform specializing in high-volume machine data processing. The company closed a $15.4 million Series A round in October 2025 led by Two Bear Capital, with participation from Gula Tech Adventures and others, bringing total funding to at least that figure. Gravwell's platform ingests raw logs, network traffic, and event streams without requiring pre-processing, positioning it as an alternative to legacy SIEM systems.
Its architecture allows enterprises to centralize petabytes of operational data for threat hunting, compliance, and AI activity auditing—a capability emphasized in its 2026 workshop series. The company reports over 100% year-over-year growth, though specific revenue figures remain undisclosed. Gravwell's product evolution includes Logbot, an AI assistant for log analysis introduced in early 2025, which provides natural language explanations of security events without sharing data with third parties. The company actively participates in cybersecurity conferences and workshops, with scheduled appearances at Black Hat 2026 and regional events through mid-2026.
Who buys this
- Enterprise security teams replacing legacy SIEM systems
- Organizations with large-scale IT/OT convergence needs
- Government agencies requiring raw data retention
- Companies auditing AI agent activity
- Mid-market firms using the Community Edition
Strengths and what to watch
Strengths
- Indexer-based pricing model avoids per-GB fees, reducing cost volatility for high-volume users
- Self-hosted deployment maintains data sovereignty for regulated industries
- Logbot AI feature provides contextual log analysis without third-party data sharing
Watch for
- Dependence on Two Bear Capital post-Series A may influence strategic direction
- Competition from cloud-native SIEM providers like Panther and Matano
- AI auditing features remain unproven at scale despite marketing emphasis
Recent moves
Key Information
- Founded
- 2017
- Headquarters
- Minneapolis, US
Frequently Asked Questions
What is Gravwell used for?
Gravwell is a security data platform that collects and analyzes machine logs, network traffic, and operational data. It helps enterprises centralize petabytes of information for threat detection, compliance, and AI activity auditing without requiring pre-processing. The platform serves as an alternative to traditional SIEM systems.
How does Gravwell's pricing work?
Gravwell uses an indexer-based pricing model instead of charging per gigabyte of data processed. This approach reduces cost volatility for organizations handling high data volumes, particularly beneficial for enterprises replacing legacy SIEM systems or managing large-scale IT/OT convergence projects.
What is Logbot in Gravwell?
Logbot is Gravwell's AI assistant for log analysis, introduced in 2025. It provides natural language explanations of security events while keeping data within the customer's environment. This feature addresses privacy concerns by avoiding third-party data sharing common in cloud-based security tools.
Who typically uses Gravwell?
Gravwell serves enterprise security teams, government agencies with strict data retention needs, and companies auditing AI systems. Its self-hosted deployment appeals to regulated industries requiring data sovereignty, while a Community Edition targets mid-market firms. Users often replace legacy SIEMs or manage IT/OT convergence.
How does Gravwell handle AI activity monitoring?
Gravwell's platform includes specialized capabilities for auditing AI agent behavior, a focus of its 2026 workshop series. It ingests raw operational data to track AI system interactions without preprocessing, though these features remain relatively new compared to established log analysis functions.
What are Gravwell's main competitors?
Gravwell competes with cloud-native SIEM providers like Panther and Matano. Its differentiation lies in self-hosted deployment, indexer-based pricing, and Logbot's local AI analysis. However, the platform faces challenges proving its AI auditing capabilities at scale against established cloud alternatives.
Sources
- www.prnewswire.com — Series A funding amount and investor details
- www.gravwell.io — Logbot product capabilities and privacy claims
- www.gravwell.io — 2026 workshop content on AI auditing
- docs.gravwell.io — Commercial licensing terms and data handling policies