WillItSurvive
United States · acquisition pending · United States

Panther Labs

Cloud-native SIEM and security data-lake vendor, now being acquired by Databricks.

Losing its protection
Assessed 29 July 2026 · Evidence as of 29 July 2026
The structural protection is eroding.
On the recordSince 29 July 2026 · Checkable from within 12-18 months of deal close · Every call on the record Checkpoint: Databricks decides whether Panther stays a distinct product or gets folded into Lakewatch
The call

Panther's independent fate ends with the Databricks deal, and what happens next depends on integration choices that have not been made public.

Panther Labs built tools to help companies catch cyber attacks by writing detection rules and organizing security data in the cloud. The problem is that larger competitors like Splunk, Microsoft, and Palo Alto all offer similar products, and AI systems are now automating much of the work that made Panther valuable in the first place. The real question is whether Panther will stay its own product team inside Databricks or get absorbed and lose its identity within the next year or two.

Why
01
AI pressure: CrowdStrike Charlotte AI, Microsoft Security Copilot, Palo Alto Cortex XSIAM agentic SOC features. Rivals now ship AI agents that triage alerts and write detections, the same manual work Panther used to charge for. Could AI do the core job? Yes, likely.
02
Bigger players: Splunk (Cisco), CrowdStrike, Microsoft Sentinel, Palo Alto Networks Cortex XSIAM. All four ship competing SIEM or SOC platforms with agentic features, squeezing Panther's independent positioning before the deal closes. Could a giant copy it? Yes, easily.
03
What protects it. Databricks ownership gives Panther a bigger distribution base and tighter data-lake integration, if Databricks keeps it as a distinct product line.
What would change this call
Whether Panther keeps a distinct brand and engineering roadmap under Databricks within 12 to 18 months. Shows if Databricks is investing in Panther or absorbing it into Lakewatch.
Whether CrowdStrike, Microsoft, or Palo Alto bundle agentic-SOC features free into existing enterprise contracts. Would show incumbents pricing Panther's core value out of the market.
Whether named customers like Snowflake, Figma, Coinbase, or Anthropic stay on Panther post-acquisition or migrate to rival SIEM platforms. Would show real customer retention or loss during the integration period.
Key numbers
  • $1.4B valuation from $120M Series B (2021-12-02)
  • Databricks valued around $134B at deal announcement (2026-06-16)
  • Third Databricks security acquisition in one year (2026-06-16)
Named risks
  • Panther brand or team could be dissolved into Databricks' Lakewatch line within 12-18 months post-acquisition. Severity: high
  • Agentic-SOC features are being commoditized by Splunk, CrowdStrike, Microsoft, and Palo Alto on 6-12 month cycles. Severity: high
  • Core historical value, manual detection-rule writing and alert triage, is exactly what AI agents (including Panther's own) automate. Severity: medium
  • Revenue and headcount figures remain unconfirmed and conflicting across data brokers (150-305 employee range). Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
Splunk (Cisco)contestingNamed as incumbent Databricks aims to challenge via Panther acquisition, June 16, 2026
CrowdStrikecontestingNamed as incumbent target of Databricks-Panther deal; shipping own agentic-SOC features by mid-2026
Microsoft Sentinellosing toBundling agentic-SOC features into existing enterprise agreements as of 2026, per vendor comparison pages
Palo Alto Networks (Cortex XSIAM/AgentiX)losing toShipping competing agentic-SOC capability, cited in 2026 vendor comparison materials
Huntersgaining onClosest direct competitor also built on cloud data lake (Snowflake) architecture as of April 2026
Questions people ask
Is Panther Labs profitable?
Panther Labs has never disclosed audited revenue or profit figures. As of June 16, 2026, it was acquired by Databricks with financial terms undisclosed, so profitability status remains unknown; the deal itself signals the company needed a larger platform's distribution rather than standalone scale.
Who owns Panther Labs now?
Databricks Inc. agreed to acquire Panther Labs on June 16, 2026, making it Databricks' third cybersecurity acquisition that year after Antimatter Inc. and SiftD Inc. Financial terms were not disclosed, and whether Panther keeps its brand under Databricks' Lakewatch line is still unresolved.
Could AI replace Panther Labs' product?
Panther's own AI Alert Triage Agent, launched March 19, 2026 on Anthropic's Claude via AWS Bedrock, automates the manual detection-rule writing and alert triage that historically justified paying for a SIEM, the same workflow CrowdStrike, Microsoft, and Palo Alto are now automating too.
Who is Panther Labs' biggest competitor?
Press coverage of the June 16, 2026 Databricks deal names Splunk (now Cisco) and CrowdStrike as the incumbents Databricks aims to challenge via Panther, while Microsoft Sentinel, Palo Alto Cortex XSIAM, Hunters, Sumo Logic, and Exabeam compete directly in cloud-native SIEM and agentic-SOC features.
What was Panther Labs' last valuation before being acquired?
Panther Labs was valued at $1.4 billion via a $120 million Series B led by Coatue Management in December 2021. That remained its last disclosed primary valuation until Databricks agreed to acquire it on June 16, 2026 with undisclosed terms.
Will Panther Labs keep its brand after the Databricks deal?
As of the June 16, 2026 announcement, Databricks had not confirmed whether Panther will operate as a distinct product line within its Lakewatch security division or be absorbed within 12-18 months; leadership retention and roadmap commitments remain unresolved.
Timeline
  • 2026-06-29Panther adds MCP server support and Claude Code/Cowork agent-activity ingestion as new telemetry
  • 2026-06-16Databricks agrees to acquire Panther Labs; terms undisclosed
  • 2026-06-15Panther announces private-preview integration with Databricks Security Lakehouse
  • 2026-03-19GA launch of Panther's Complete AI SOC Platform with AI Alert Triage Agent
  • 2025-10-02Panther achieves AWS Generative AI Competency status
  • 2024-01Panther achieves AWS Security ISV Competency
  • 2021-12-02Panther raises $120M Series B led by Coatue at $1.4B valuation
  • 2020-09-09Panther closes $15M Series A, advised by Wilson Sonsini
  • 2019Panther Labs raises $4.5M Seed round
Revision history
29 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources