Cribl
The plumbing that sits between a company's machine data and its security and monitoring tools. Past $300M in recurring revenue, valued at $3.5B in 2024, and now building its own SIEM.
Cribl, Feb 11, 2026- Valuation
- $3.5B at the Series E in Aug 2024, up 40% on the 2022 round. No priced round since.
- Raised
- Over $600M across all rounds, per Cribl. The last round mixed new money with share sales.
- Revenue
- $300M+ ARR passed in 2025, up from $200M in Dec 2024. Growth over 40% in its FY26.
- Watch
- Splunk appeal a jury found willful copyright infringement but awarded $1. Both sides have appealed.
- AI
- Agent-ready an MCP server ships inside the product, and docs publish llms.txt for agents.
- Liquidity
- $119M secondary sold inside the 2024 round. Who sold was not disclosed. No staff tender found since.
- Hiring
- 69 → 75 remote listings since Oct 10.
It sells the pipe, not the destination.
Companies send logs, metrics and traces through Cribl Stream and Edge, which trim, reshape and route the data to whatever tools they use. Revenue is recurring: self-managed licenses plus Cribl.Cloud, which passed $130M of ARR growing over 75%. Lake, Search and now Detect let customers keep and analyze data without a costly SIEM.
Cribl, Feb 11, 2026- 1The neutral layer in front of every vendorIt feeds rival vendors' tools alike: late 2025 brought integrations with Microsoft Fabric, Google Security Operations and Amazon Security Hub.Cribl press releases, Nov to Dec 2025
- 2Deep inside the largest companiesAbout half the Fortune 100 and 35% of the Fortune 500 are customers; customers spending $500K or more rose over 50%.Cribl, Feb 11, 2026
- 3Cleared to sell to US agenciesCribl.Cloud Government won a FedRAMP Moderate authorization in Jan 2026, a slow, costly bar that keeps newer rivals out.Cribl, Jan 29, 2026
- Cisco$411Blisted, Oct 30 close
- CrowdStrike$256Blisted, Oct 30 close
- Datadog$84.5Blisted, Oct 30 close
- Elastic$10.3Blisted, Oct 30 close
- Cribl$3.50BSeries E, Aug 27
Private values are the last reported round; they can be stale. Listed values are market value. Bars start at zero.
Every round, and what its terms give away.
Cribl is private, so there is no share price. What its investors paid, and on what terms, is the closest thing to one.
- $3.50B
- latest valuation, Series E Aug 27
- $600M
- raised in all
- $300M
- ARR, as of Jan 1
- +40%
- growth, as reported
- 1,000
- employees, as reported
Post-money valuations as reported. The line starts at zero. Rounds without a reported valuation are left off.
- Aug 27Series E$319M at $3.50BLed by GV. About 9% of the company, if all new shares$200M new money plus $119M of existing shares sold. CapitalG, GIC, IVP and CRV joined.SiliconANGLE, Aug 27, 2024; Cribl release
- May 24Series D$150M at $2.50BLed by Tiger Global Management. About 6% of the company, if all new sharesValuation reported by TechCrunch from an unnamed source. Total raised reached $400M.TechCrunch, May 24, 2022
- Aug 25Series C$200MLed by Greylock and Redpoint VenturesIVP new; Sequoia, CRV, Citi Ventures and CrowdStrike also in. TechCrunch later put the Aug 2021 valuation at $1.5B.Cribl blog, Aug 25, 2021
- Oct 15Series B$35MLed by Sequoia CapitalCRV participated. Total raised reached $46M.SiliconANGLE, Oct 15, 2020
- Was the last round a down round?No. The Series E at $3.5B was 40% above the 2022 Series D, which TechCrunch reported at $2.5B.Cribl blog, Aug 27, 2024Clear
- How much of the company did the last round sell?About 9% at the headline ($319M of $3.5B), but only about 6% was new shares ($200M). The rest changed hands.SiliconANGLE, Aug 27, 2024Clear
- How long since the last raise?About 26 months, with no newer Form D on file. Not a warning sign by itself at $300M+ ARR, but the $3.5B mark is now old and may not match today's price.SEC EDGAR, Cribl Form D filings, checked Oct 31, 2026Flag
- Any unusual terms (preference above 1x, ratchets, warrants)?None reported, but terms of private rounds are not public. The 2024 Form D lists $136.6M of equity sold, less than the $200M of new money reported, which is not explained.SEC Form D, filed Aug 28, 2024Open
- Who led: a new outsider or insiders?A new lead, GV, whose partner Michael McBride joined the board. Alphabet's CapitalG and GIC also joined.Cribl, Aug 27, 2024Clear
- Can employees sell shares?$119M of existing shares sold in the 2024 round; reports do not say whether staff could sell. No company tender offer found since.SiliconANGLE, Aug 27, 2024Open
- Layoffs in the last 12 months?None found in news searches. Headcount passed 1,000 in Jan 2026, up from over 700 in Aug 2024.Cribl, Feb 11, 2026; news search Oct 31, 2026Clear
Clear: checked, nothing found. Flag: found, with the source. Open: could not be checked.
No filing reported
What the record says, and what we think it means.
The fact is the source's. The read, in italics, is ours.
- 01Watch
Splunk won its copyright case, for $1, and the fight is on appeal.
Bloomberg Law, Dec 31, 2025; Federal Circuit docketA jury found in April 2024 that Cribl willfully infringed Splunk's copyright. Judge Alsup upheld the $1 verdict on Dec 31, 2025. Cross-appeals (26-1317, 26-1355) were fully briefed by Sept 2026.
The money risk is small so far. The real stakes are the injunction on how Cribl may use Splunk software to test compatibility, which matters because so many customers route data into Splunk.
- 02Good
Past $300M of recurring revenue, with the cloud growing fastest.
Cribl, Feb 11, 2026ARR passed $300M in 2025, from $200M in Dec 2024. Cloud ARR is over $130M, up more than 75%. Customers grew over 25%.
Growth slowed from the triple digits of 2020 to 2023, but 40%+ at this size is still strong. That is IPO-sized revenue.
- 03Neutral
A departing employee's post says ARR passed $400M.
ARR Club, Oct 11, 2026 (reported)ARR Club reported on Oct 11, 2026 that a farewell LinkedIn post by a long-time employee said Cribl had passed $400M of ARR.
Not confirmed by Cribl. If true, it would mean about 33% growth in eight months. Treat as reported until the company says so.
- 04Neutral
The board looks like an IPO board.
Cribl, Feb 11, 2026; Nov 20, 2025Mike Kourey, who has taken five companies public, joined to chair the audit committee. MongoDB CEO CJ Desai joined in Nov 2025.
An audit chair with IPO experience is a classic step before going public. It is a signal, not a filing; no IPO has been filed.
- 05Neutral
Bought CardinalOps, and opened a Tel Aviv office.
Cribl, Jul 14, 2026On Jul 14, 2026 Cribl bought CardinalOps, which uses AI to find gaps and broken rules in security detections. Price not disclosed.
First sizable step from data plumbing into security analytics. Expect security and Israel-based hiring.
- 06Neutral
Bought the AI SOC tech of Radiant Security.
Cribl, Aug 19, 2026On Aug 19, 2026 Cribl acquired the technology assets of Radiant Security's AI security operations product, which triages and investigates alerts. An asset deal; terms not disclosed.
Two security buys in five weeks. Cribl is assembling a full security product rather than building it all in house.
- 07Watch
Now selling a SIEM, against some of its own partners.
Cribl, Sep 29, 2026Cribl Detect launched Sept 29, 2026 for Cribl.Cloud customers, claiming a full SIEM at up to 50% less cost than others.
Bigger prize, bigger risk. Cribl grew as the neutral pipe into Splunk and others; competing with them head on may strain those ties.
- 08Good
Cleared for US federal agencies.
Cribl, Jan 29, 2026Cribl.Cloud Government received a FedRAMP Moderate authorization on Jan 29, 2026.
Opens the US government market. Expect roles needing US citizenship or clearance.
Sales is paid 1% over market. Engineering, 9% under.
We save every company's roles, pay by team and level, AI share and churn every day, so each month this page can say more. Sparklines use their own scale.
Can AI agents do business with Cribl?
We checked the agent payment programs, developer docs and site rules an AI assistant would meet.
Built for agents. An MCP server ships in the product.
Still Remote read- YesAn MCP server agents can callEmbedded in the Cribl Leader at /api/v1/mcp, using each user's own permissions. Works with Cursor, Claude Code and Codex. A standalone Docker version also exists.Cribl docs, checked Oct 31, 2026
- YesIts own AI can use other MCP toolsCribl AI can connect to outside MCP servers and use their tools in agent conversations.Cribl AI docs index, checked Oct 31, 2026
- YesDeveloper docs that AI tools can readdocs.cribl.io/llms.txt is an index written for AI agents, linking per-product indexes and API references in Markdown.checked Oct 31, 2026
- YesA guide for AI on the main sitecribl.io/llms.txt (v2.0, updated Jul 13, 2026) maps which Cribl site to use for which task.checked Oct 31, 2026
- YesLets AI crawlers read its siterobots.txt names no AI bots. It blocks only some blog category pages, resource filters and /copilot-preview for all bots.checked Oct 31, 2026
- AnnouncedInfrastructure for customers' own AI agentsStreamAI, an AI gateway that routes prompts, caps spend and logs every model call, was announced Sept 29, 2026. Availability due at CriblCon.Cribl, Sep 29, 2026
Where Cribl puts AI to work.
- 1Buying AI teams for securityIts AI detection and alert triage came through two 2026 deals, CardinalOps and Radiant Security's AI SOC assets, rather than only in-house builds.Cribl, Aug 19, 2026
- 2Tests AI models on its own workCribl's SecIT Bench ran 20 models on 30 IT and security investigations and found a 20x spread in cost. That research shapes how StreamAI routes prompts.Cribl, Sep 29, 2026
- 3Still adding peopleHeadcount passed 1,000 in Jan 2026, with EMEA and APJ growing fastest. No AI-linked job cuts reported.Cribl, Feb 11, 2026
More listings than on Sep 7, most of them in sales.
What Cribl puts on its own channel.
Short videos from Cribl's official YouTube channel, played here. We only use a channel that links cribl.io and carries the company's name.
- Why partners love working with Cribl68 views
- Introducing White Logus, the World’s First Luxury Wellness Retreat for Telemetry94 views
- Cribl Search Pack for Windows: Dashboards for Windows logs & suspicious activity352 views
- AI agents for incident response in Cribl Search: From Slack alert to rollback802 views
- Why AI troubleshooting agents need a common telemetry data model (OCSF, ECS)583 views
- Why schema-on-read breaks for agentic telemetry — and how LLM parsers reshape data architecture566 views
- Agentic telemetry explained: 10x your investigations with AI688 views
- Cribl Guard: Clint Sharp on AI PII detection in telemetry data885 views
What has to be true for $3.5 billion to hold?
The starting revenue is Cribl's own reported figure. A way to think, not a forecast, and not investment advice.
At 12x, Cribl needs $292 million of revenue to be worth $3.5 billion. Your world gets there with $588 million, so the next round likely prices above the last.
$100,000 of equity valued at the $3.50B Series E price would be worth about $201,600 on paper in this world, before dilution from new rounds, taxes and vesting. Private shares only turn into cash at a sale, an IPO or a tender offer.
A way to think, not a forecast, and not investment advice.
Cribl, Feb 11, 2026; Aug 27, 2024The signals, and which way they push.
- TailwindAI makes more machine data, and more queries.
Cribl pitches itself as the telemetry layer for the AI era; cloud ARR grew over 75% and big-spending customers over 50%.
- TailwindCustomers want cheaper SIEMs.
Detect is priced on infrastructure, not data volume, and claims up to 50% lower cost; two security deals in 2026 back it.
- HeadwindBig platforms want the same pipe.
Cribl now competes with the SIEM vendors it feeds, and Splunk, owned by Cisco, is still in court with it.
- TailwindA new market in US government.
FedRAMP Moderate in Jan 2026 lets federal agencies buy Cribl.Cloud Government.
Where Cribl ends up, if we had to bet.
Our calls, not facts. Each one is tied to something that already happened, so you can judge the reasoning.
- 1
Cribl lists on a US exchange before 2031.
Likely 72%IPOIt has $300M+ of ARR, 40%+ growth and an audit chair who has taken five companies public. No filing has been reported yet, and timing depends on markets.
Cribl, Feb 11, 2026 - 2
A big security or cloud company buys Cribl outright.
Long shot 16%M&AAlphabet's GV and CapitalG own a stake, which makes Google a natural suitor. But Cribl is itself the buyer in 2026, and its pitch depends on staying neutral between vendors.
Cribl, Aug 2024 and Jul to Aug 2026 - 3
Security products, led by Detect, bring in a third of Cribl's revenue.
Coin flip 50%ProductsDetect, CardinalOps and the Radiant assets all landed in 2026. Displacing an existing SIEM is slow, and customers may keep Cribl as only the pipe.
Cribl, Sep 29, 2026 - 4
Routing and logging company AI traffic becomes a core Cribl business.
Coin flip 50%AIStreamAI and the Claude Compliance API feed point that way, and the embedded MCP server makes Cribl easy for agents to use. StreamAI is announced, not yet proven with customers.
Cribl, Sep 29, 2026; May 21, 2026 - 5
The Splunk case ends without large damages against Cribl.
Likely 72%CompetitionThe jury awarded $1 and the trial judge kept it. The appeal could still reshape the injunction or the fair use ruling.
Bloomberg Law, Dec 31, 2025
Read by the Still Remote research agent on November 1, 2026 from the sources linked on this page. Facts and scenarios only, not investment advice.