Is Graylog profitable in 2026?

Graylog does not publicly disclose profitability. Datanyze estimates annual revenue near $15.8M (undated, likely stale), and the company has gone 34+ months without a new capital raise as of June 2026, per Crustdata, suggesting it is relying on its October 2023 funding rather than new profits.

Has Graylog raised any funding recently?

No. Graylog's last funding round was $39M in October 2023, led by Silver Lake Waterman, Piper Sandler Merchant Banking, and Harbert Growth Partners, bringing total raised to about $65-66.5M. As of June 2026, that is 34+ months with no new round reported.

Graylog is privately held and venture-backed, with no single dominant investor. Backers include Mercury Fund, e.ventures, HTGF, Crosslink Capital, Draper Associates, Silver Lake Waterman, and Harbert Growth Partners. Andy Grolnick has been CEO since November 2020; the company is headquartered in Houston, Texas.

Could AI replace Graylog's product?

Graylog is building AI into its own SIEM rather than being replaced outright, shipping explainable AI, agentic MCP workflows (previewed March 2026), and automated investigations (GA May 2026). But rivals like Microsoft Sentinel and Datadog can ship similar AI-native SIEM features with far more resources.

Who is Graylog's biggest competitor?

Graylog is marketed as a lower-cost, self-hostable Splunk alternative, but Splunk is now owned by Cisco since March 2024. Graylog also competes with Microsoft Sentinel, Datadog Security, Elastic Security, and free open-source Wazuh, all targeting the same mid-market SIEM buyer.

Is it safe to take a job at Graylog in 2026?

Signals are mixed. Headcount was about 128 as of June 2026 per Crustdata, down 3.8% year over year, with only 2 open US roles and a 6% quarter-over-quarter drop in web traffic, alongside 34+ months without a new funding round, pointing to slowed growth rather than crisis.

Cybersecurity companies · Germany

Graylog

graylog.org ↗

German-founded, Houston-based maker of the Graylog log management and SIEM platform.

Losing its protection

Assessed 21 July 2026 · Evidence as of 21 July 2026

The structural protection is eroding.

On the recordSince 21 July 2026 · Checkable from Q3-Q4 2026 · Every call on the record Checkpoint: Next Gartner Magic Quadrant and GigaOm Radar refresh for SIEM

The call

Graylog has a real user base and a parser library that's hard to rip out, but no fresh funding in 34 months and flat headcount point to a company holding position, not gaining it.

Graylog sells software that collects and analyzes security logs for medium-sized companies. It has real advantages: 60,000 existing installations, free open-source versions, and custom detection rules that are hard for customers to leave. But Microsoft, Datadog, and Elastic are offering similar tools, often bundled with other services, and free alternatives like Wazuh exist. The company has not raised new funding in nearly three years, hiring is flat, and website traffic is dropping, which signals its AI-powered updates have not yet attracted new customers. The critical turning point will be whether Graylog can raise fresh capital at a good price, secure named customers willing to talk publicly, or get acquired before cash runs too low.

Why

AI pressure: AI-driven SIEM copilots (Microsoft Security Copilot, Dropzone AI, similar triage agents). AI agents that auto-correlate logs and write case summaries could copy what Graylog's Illuminate parsers do by hand. Could AI do the core job? Only partly.

Bigger players: Microsoft Sentinel and Datadog Security. Both sell SIEM as an add-on to platforms customers already run, undercutting Graylog's standalone pitch on price and reach. Could a giant copy it? Yes, easily.

What protects it. 60,000+ existing deployments and the Illuminate parser library make ripping Graylog out costly, even if it's not the flashiest option.

What would change this call

Graylog announces a new capital raise or reports a down round/bridge within 6 months. Would show whether the AI-SIEM pivot is attracting fresh investor confidence or signaling distress.
Gartner Magic Quadrant or GigaOm Radar for SIEM refresh (next 6-12 months) shifts Graylog's ranking. Would show analyst view of Graylog's competitive position versus Sentinel, Elastic, Datadog moving up or down.
Graylog publishes named enterprise customer logos or disclosed ARR growth figures. Would show whether the 60K-org installed base is converting to paid growth or remaining stagnant.

Key numbers

34+ months since last capital raise (2026-06-20)
60,000+ organizations run Graylog in 180 countries (2026-05-04)
Headcount down 3.8% YoY to 128 employees (2026-06-20)

Named risks

No capital raise in 34+ months as of June 2026, raising down-round or bridge financing risk. Severity: high
Headcount down 3.8% YoY with only 2 open US roles, signaling slowed hiring and growth. Severity: medium
No named enterprise customer logos disclosed publicly, only anonymized case studies. Severity: medium
Hyperscalers like Microsoft and Datadog can bundle equivalent AI-SIEM features at near-zero marginal cost. Severity: high

Rivals, as read in July 2026

Rival	Direction	Evidence
Splunk (Cisco)	contesting	Marketed as lower-cost Splunk alternative since Cisco completed acquisition March 2024
Microsoft Sentinel	losing to	Bundled distribution into Azure/M365 ecosystem gives near-marginal-cost reach as of 2026
Datadog Security	losing to	Cross-selling security into existing observability customer base as of 2026
Wazuh	contesting	Free open-source SIEM competes from below in the affordable-SIEM niche
Elastic Security	contesting	Similar open-core SIEM model targeting same mid-market buyers

Questions people ask

Is Graylog profitable in 2026?: Graylog does not publicly disclose profitability. Datanyze estimates annual revenue near $15.8M (undated, likely stale), and the company has gone 34+ months without a new capital raise as of June 2026, per Crustdata, suggesting it is relying on its October 2023 funding rather than new profits.
Has Graylog raised any funding recently?: No. Graylog's last funding round was $39M in October 2023, led by Silver Lake Waterman, Piper Sandler Merchant Banking, and Harbert Growth Partners, bringing total raised to about $65-66.5M. As of June 2026, that is 34+ months with no new round reported.
Who owns Graylog?: Graylog is privately held and venture-backed, with no single dominant investor. Backers include Mercury Fund, e.ventures, HTGF, Crosslink Capital, Draper Associates, Silver Lake Waterman, and Harbert Growth Partners. Andy Grolnick has been CEO since November 2020; the company is headquartered in Houston, Texas.
Could AI replace Graylog's product?: Graylog is building AI into its own SIEM rather than being replaced outright, shipping explainable AI, agentic MCP workflows (previewed March 2026), and automated investigations (GA May 2026). But rivals like Microsoft Sentinel and Datadog can ship similar AI-native SIEM features with far more resources.
Who is Graylog's biggest competitor?: Graylog is marketed as a lower-cost, self-hostable Splunk alternative, but Splunk is now owned by Cisco since March 2024. Graylog also competes with Microsoft Sentinel, Datadog Security, Elastic Security, and free open-source Wazuh, all targeting the same mid-market SIEM buyer.
Is it safe to take a job at Graylog in 2026?: Signals are mixed. Headcount was about 128 as of June 2026 per Crustdata, down 3.8% year over year, with only 2 open US roles and a 6% quarter-over-quarter drop in web traffic, alongside 34+ months without a new funding round, pointing to slowed growth rather than crisis.

Timeline

2026-06-2034+ months since last capital raise; headcount ~128, down 3.8% YoY, per Crustdata
2026-05-04Graylog 7.1 Spring 2026 release GA: automated investigations, anomaly detection, Azure Blob support
2026-05-03Won two Global InfoSec Awards at RSA Conference 2026
2026-03-18RSA preview of explainable AI and agentic MCP Server workflows
2025-10-15Included in Gartner's 2025 Magic Quadrant for SIEM
2025-09-03Named Leader/Outperformer in GigaOm's 2025 SIEM Radar report
2023-10-31Raised $39M (equity plus debt) led by Silver Lake Waterman
2023-07Acquired Resurface.io API security platform, its only known acquisition
2021-06-24Raised $18M growth equity round led by Harbert Growth Partners
2009-05Founded in Hamburg, Germany by Lennart Koopmann as open-source project

Revision history

21 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

Seqrite Meiya Pico NSFOCUS