CrowdStrike buys Onum to power NextGen SIEM with real-time telemetry

CrowdStrike announced Wednesday it has agreed to acquire Madrid based telemetry pipeline startup Onum in a move intended to accelerate and scale its Falcon NextGen SIEM platform. CrowdStrike said the deal will add realtime data pipeline management and filtering capabilities that stream high quality, filtered telemetry into its SIEM to enable faster, AI driven threat detection. The companies did not disclose financial terms; some reports, however, put the value of the transaction at about $290 million after roughly three months of negotiations.

CrowdStrike described Onum as both a pipeline and a filter that can ingest, enrich and optimize telemetry at scale so detections can start before data is fully landed in the Falcon platform. In a company statement, chief executive George Kurtz said NextGen SIEM is the engine that powers the modern security operations center and that data is its fuel. CrowdStrike said embedding Onum will reduce onboarding friction, lower storage and ingestion overhead and boost the effectiveness of its AI models and agentic security operations.

The acquisition brings a Madrid based team founded in 2022 by Pedro Castillo, who previously founded Devo, a cloud...