Databricks Deepens Cybersecurity Push with Panther Labs Buyout

Databricks has agreed to acquire Panther Labs, a cloud-native security analytics startup founded in 2018 and headquartered in San Francisco, California, in a move that significantly expands its presence in the fast-growing security analytics market. The acquisition also highlights the increasing convergence of artificial intelligence, data management, and cybersecurity. Financial terms of the transaction were not disclosed.

Photo by AI25.Studio Studio from Pexels: 

The deal, announced during Databricks' Data + AI Summit in San Francisco, brings Panther's detection-as-code platform into Databricks' unified data and machine learning ecosystem. Panther's technology ingests and analyzes massive volumes of security telemetry—including logs, events, and alerts—to help organizations detect threats and automate security operations at scale.

The acquisition marks Databricks' third cybersecurity-related deal and reflects the company's broader ambition to evolve beyond data analytics into a major enterprise security platform. The move comes as organizations worldwide face an unprecedented surge in AI-driven cyberattacks. As threat actors increasingly use artificial intelligence to automate and accelerate attacks, enterprises are seeking advanced security solutions capable of processing vast datasets and responding to threats in real time.

Founded in 2018, Panther Labs has emerged as a leading cloud-native security operations platform. Its architecture was designed specifically for modern cloud environments, leveraging open data formats and integrations with popular observability and security information and event management (SIEM) tools. A key differentiator of Panther's platform is its detection-as-code approach, which enables security teams to write, test, and deploy detection logic in software code, improving scalability while reducing alert fatigue through automation and analytics.

Panther has also expanded its platform through product innovation and strategic acquisitions. In 2025, the company acquired security telemetry pipeline provider Datable, strengthening its capabilities in data transformation, filtering, and analysis. That acquisition underscored Panther's belief that cybersecurity is fundamentally a data problem requiring modern data engineering approaches.

Databricks has similarly pursued an aggressive acquisition strategy to broaden its platform. Recent deals have enhanced its analytics, data visualization, governance, and low-code capabilities, helping transform the company from a data processing specialist into a comprehensive enterprise software provider.

The company's cybersecurity ambitions became increasingly evident with the introduction of Lakewatch, a security-focused offering designed to help organizations monitor, secure, and govern their data environments. By acquiring Panther Labs, Databricks significantly accelerates that strategy, gaining both a mature security operations platform and a team with deep cybersecurity expertise.

For industry observers, the acquisition represents a "fight fire with fire" strategy. As AI reshapes the speed, scale, and sophistication of cyberattacks, Databricks is betting that the future of security will be driven by intelligent, agent-based systems rather than traditional reactive security tools. In this context, AI agents are software systems capable of autonomously performing complex, multi-step security tasks with minimal human intervention.

Founded in 2013 by the original creators of Apache Spark, Databricks has established itself as a leader in data engineering, analytics, and artificial intelligence. Headquartered in San Francisco, the company has grown into one of the world's most valuable private technology firms, with a reported valuation of approximately $134 billion. The acquisition of Panther Labs further strengthens its position at the intersection of data, AI, and cybersecurity—three markets that are becoming increasingly interconnected as enterprises seek to defend against the next generation of digital threats.