Splunk Acquisitions

June 18, 2026

WideField Security Inc. (intent to acquire)

WideField Security is a modern identity lifecycle security company, headquartered in Santa Clara, California. WideField’s technology has critical capabilities in the correlation and normalization of identity telemetry, ensuring that deterministic data serves as the bedrock for securing non-deterministic AI workflows in the Agentic SOC. WideField will accelerate Splunk's Agentic SOC capabilities by expanding the lens of threat investigation with identity, credentials, sessions, and blast radius.

April 9, 2026

Galileo Technologies, Inc

Galileo is a dynamic player in the observability for AI space that is helping make AI more reliable, trustworthy, safe, and observable. Galileo was purpose-built to solve one of the hardest and most consequential problems in AI: Trust. From day 1, its platform has given AI teams the tools to evaluate AI quality, detect AI failures before they reach users, and continuously improve AI behavior in production – turning observability from a nice-to-have into a core pillar of AI development.

August 25, 2025

Aura Asset Intelligence (Discovered Intelligence)

Aura Asset Intelligence is an Asset and Risk Intelligence (ARI) solution purpose built as a Splunk app, leveraging data that has already been ingested into Splunk, to provide enhanced asset and identity discovery along with relationship mapping. The solution was created by Discovered Intelligence, a privately held company based in Toronto, Canada. The acquisition of Discovered Intelligence's Aura Asset Intelligence product, intellectual property, personnel and related assets will help expand Splunk's asset and risk intelligence capabilities, enabling customers to better understand their asset inventory, attack surface, and enrich investigations with asset context.

December 2024

SnapAttack

Cisco’s acquisition of SnapAttack, a threat detection and defense company, will support Splunk to drive further innovation and power the SOC of the future with a unified threat detection, investigation and response (TDIR) solution to help customers strengthen their digital resilience.

November 2022

TwinWave

Splunk's acquisition of TwinWave extends our security leadership and adds capabilities to empower the security analyst with cloud-native, automated threat analysis for phishing and malware.

May 2021

TruStar

Splunk's acquisition of TruSTAR extends its leadership in security analytics through cloud-native threat intelligence integration and automation.

DECEMBER 2020

Flowmill

Splunk’s acquisition of Flowmill brings next-generation cloud network performance monitoring to Splunk’s Observability solutions.

NOVEMBER 2020

Rigor

Splunk’s acquisition of Rigor adds a unique Digital Experience Management (DEM) platform that combines the power of synthetic monitoring with intelligent optimization engine capabilities to enhance Splunk's Observability solutions.

OCTOBER 2020

Plumbr

Splunk’s acquisition of Plumbr enhances the auto-instrumentation, real user monitoring and deep application performance monitoring capabilities of Splunk’s Observability solutions.

NOVEMBER 2019

Streamlio

Splunk’s acquisition of Streamlio accelerates Splunk's efforts in real-time stream processing and containerized multi-tenant cloud platform applications — expanding Splunk's commitment to and participation in the open source software community.

OCTOBER 2019

SignalFx

Splunk’s acquisition of SignalFx adds real-time monitoring and metrics for cloud infrastructure, microservices and applications, enhancing Splunk’s position as a leader in observability and APM.

SEPTEMBER 2019

Omnition

Splunk’s acquisition of Omnition adds distributed tracing analytics for next generation application monitoring, expanding Splunk’s observability capabilities.

JULY 2018

KryptonCloud

Splunk’s acquisition of KryptonCloud expands Splunk’s ability to innovate for IoT use cases with our market-leading machine data platform.

JUNE 2018

VictorOps

Splunk’s acquisition of VictorOps adds collaborative incident management capabilities to Splunk’s portfolio and creates an analytics-driven “Platform of Engagement” for DevOps and IT customers to better prevent and resolve incidents.

APRIL 2018

Phantom Cyber

Splunk’s acquisition of Phantom Cyber adds security orchestration, automation and response to Splunk’s portfolio and extends automation capabilities to Splunk's customers in security and IT.

OCTOBER 2017

Rocana

Splunk's acquisition of Rocana’s technology and intellectual property plus a number of Rocana’s technical employees advances Splunk's market-leading machine data platform and machine learning capabilities.

SEPTEMBER 2017

SignalSense

Splunk’s acquisition of SignalSense enables Splunk to further innovate in our market-leading machine data platform and expands Splunk’s expertise in machine learning and cloud applications.

MAY 2017

Drastin

Splunk’s acquisition of Drastin expands Splunk’s search-driven analytics capabilities and enhances our ability to provide an intuitive search experience for our customers.

JULY 2015

Caspida

Splunk’s acquisition of Caspida adds Behavioral Analytics to Splunk’s security portfolio and expands our ability to address a broader set of security challenges faced by customers including advanced threats, insider threats and fraud.

JUNE 2015

Metafor

Splunk’s acquisition of Metafor expands our capabilities in IT operations and security incident and event management (SIEM) by adding machine learning and anomaly detection to our solutions, which helps customers detect unknown and malicious threats.

DECEMBER 2013

Cloudmeter

Splunk’s acquisition of Cloudmeter adds new capabilities to Splunk products that enable customers to analyze machine data directly from their networks and correlate it with other machine-generated data to gain insights in application and infrastructure management, IT operations, security and business analytics.