Splunk
Splunk Inc., founded in 2005 and headquartered in San Francisco, is a cybersecurity and observability company that ingests, monitors, and analyzes machine data at petabyte scale.
Profile
Splunk provides a software platform that collects, indexes, and analyzes machine-generated data from IT systems, security devices, and business applications to help organizations monitor, investigate, and respond to operational and security issues.
Splunk Inc., founded in 2005 and headquartered in San Francisco, is a cybersecurity and observability company that ingests, monitors, and analyzes machine data at petabyte scale. The company reported total annual recurring revenue (ARR) of $4.2 billion for its fiscal year ended January 31, 2024, with cloud ARR reaching $2.2 billion, up 23% year-over-year. Total revenues for fiscal 2024 were $4.2 billion, up 15%, and the company generated over $1 billion in operating cash flow.
Splunk had 899 customers with ARR greater than $1 million. In September 2023, Cisco agreed to acquire Splunk for approximately $28 billion; the deal closed in late Q1 or early Q2 of calendar 2024. In November 2023, Splunk laid off nearly 7% of its global workforce (about 560 employees), which CEO Gary Steele described as unrelated to the Cisco acquisition and driven by an unpredictable macro environment.
The company's platform unifies security information and event management (SIEM), security orchestration automation and response (SOAR), and observability into a single offering, marketed as the 'Digital Resilience Platform.' Splunk claims more than 90% of the Fortune 100 as customers. The company's product portfolio includes Splunk Enterprise Security, Splunk SOAR, Splunk Observability Cloud, and the Splunk Cloud Platform. Post-acquisition, Splunk operates as a business unit within Cisco, with its products increasingly integrated with Cisco's networking and security portfolio, including Cisco Talos threat intelligence.
Who buys this
- Large enterprises with complex IT and security operations centers (SOCs)
- Government and public sector agencies, including the U.S. Department of Defense
- Financial services firms needing real-time fraud detection and compliance monitoring
- Telecommunications and media companies managing network performance and customer experience
- Retail and consumer goods companies securing e-commerce and supply chain operations
Publicly disclosed clients
- Autodesk
- Carhartt
- Specsavers
- U.S. Department of Defense
- Comcast
- United Airlines
- Honda
- Puma
- Nasdaq
- Coca-Cola
- Siemens
- Vodafone
- Progressive Insurance
- Singapore Airlines
- Carrefour
Strengths and what to watch
Strengths
- Dominant position in SIEM and observability markets, with over 90% of Fortune 100 companies as customers and a large ecosystem of 2,000+ integrations on Splunkbase.
- Strong recurring revenue model with $4.2 billion in total ARR and 899 customers each generating over $1 million in ARR, indicating high customer retention and expansion.
- Post-acquisition integration with Cisco provides access to Cisco's global sales channel, networking hardware base, and threat intelligence from Cisco Talos, expanding Splunk's reach into enterprise and government accounts.
Watch for
- Integration risk with Cisco: The $28 billion acquisition closed in 2024, and Splunk's product roadmap, pricing, and organizational structure are now subject to Cisco's strategic priorities, which may shift focus away from Splunk's independent product vision.
- Workforce reductions: Splunk laid off nearly 7% of its workforce in November 2023, and further restructuring under Cisco ownership could lead to additional headcount cuts or talent attrition.
- Competitive pressure from native cloud SIEM and observability platforms from Microsoft (Sentinel, Azure Monitor), Google (Chronicle, Cloud Operations), and Amazon (Security Lake, CloudWatch), which are increasingly bundled with their respective cloud ecosystems.
Key Information
- Industry
- Log Analytics
- Founded
- 2005
- Employees
- 6701
- Headquarters
- San Francisco
- Country
- United States
Frequently Asked Questions
What does Splunk do?
Splunk provides a software platform that collects, indexes, and analyzes machine-generated data from IT systems, security devices, and business applications. This helps organizations monitor, investigate, and respond to operational and security issues at petabyte scale.
Who owns Splunk now?
Cisco acquired Splunk for approximately $28 billion in a deal announced in September 2023 and closed in early 2024. Splunk now operates as a business unit within Cisco, with its products increasingly integrated into Cisco's networking and security portfolio.
What are Splunk's main products?
Splunk's main products include Splunk Enterprise Security for SIEM, Splunk SOAR for security orchestration, and Splunk Observability Cloud for monitoring. These are unified under the Splunk Cloud Platform and marketed as the Digital Resilience Platform.
How many Fortune 100 companies use Splunk?
Splunk claims that more than 90% of the Fortune 100 are its customers. This includes notable clients like Coca-Cola, Comcast, Nasdaq, and the U.S. Department of Defense, indicating strong adoption among large enterprises.
What happened with Splunk's layoffs in 2023?
In November 2023, Splunk laid off nearly 7% of its global workforce, about 560 employees. CEO Gary Steele stated the layoffs were unrelated to the Cisco acquisition and driven by an unpredictable macro environment.
Who are Splunk's main competitors?
Splunk faces competition from native cloud SIEM and observability platforms like Microsoft Sentinel and Azure Monitor, Google Chronicle and Cloud Operations, and Amazon Security Lake and CloudWatch. These are increasingly bundled with their respective cloud ecosystems.
Sources
- www.splunk.com — Fiscal Q4 and full year 2024 financial results: total ARR $4.2B, cloud ARR $2.2B, total revenues $4.2B, operating cash flow $1B, 899 customers with ARR >$1M, Cisco acquisition expected close in late Q1/early Q2 2024.
- www.sec.gov — SEC filing of the same press release confirming financial details and Cisco acquisition timeline.
- www.reuters.com — Reuters report confirming Splunk beat Q4 revenue estimates, total revenue $1.49B vs estimate $1.28B, and that more than 90% of Fortune 100 use Splunk.
- www.reuters.com — Reuters report on Splunk laying off nearly 7% of its global workforce (approx. 560 employees) in November 2023, unrelated to Cisco acquisition.
- www.splunk.com — Fiscal Q3 2024 results: total ARR $4.0B, cloud revenue up 26%, 851 customers with ARR >$1M, Cisco acquisition agreement announced.
- www.splunk.com — Company homepage: product descriptions (Digital Resilience Platform, Agentic SOC, Agentic observability), customer logos (Autodesk, Carhartt, Specsavers, US DoD, Comcast, United Airlines, Honda, Puma, Nasdaq, Coca-Cola, Siemens, Vodafone), and claims about 2,000+ integrations and $120B in market capitalization protected.