Friday SIEM post is here, and this week comes with another acquisition.
In case you missed it, RunReveal got acquired by ClickHouse. Yes, you guessed it, this is ClickHouse moving into the SIEM space. They will say they remain a neutral foundation for everyone building security products on top of them.
This is the shift I predicted. Companies that sat on the far left of the secops shift map (data layer, storage, query) are moving right. First they become a SIEM, then they add the rest: AI SOC, SOAR, agent builder.
On the other side, vendors that started in AI SOC and SOAR/automation are now heading toward the SIEM.
Both sides are converging on the same spot. The SIEM space is going through real disruption.
I will say, AI SOC as a technology was the catalyst that triggered the SIEM migration as well. Or AI is the catalyst for rethinking your SecOps stack.
Originally posted on LinkedIn on 4 September 2026.
Read the original post and the comments.