CrowdStrike Moves to Acquire Onum for Next-Gen SIEM

CrowdStrike is set to acquire Onum, a company known for its real-time telemetry pipeline platform. The move is aimed at strengthening Falcon Next-Gen SIEM by addressing a long-standing challenge: getting data into the platform quickly and efficiently. With Onum, CrowdStrike is positioning its SIEM as a data foundation for both cybersecurity and IT operations, reducing friction in migration and enabling detection directly in the pipeline.

Onum’s architecture is designed for scale and speed, built on a stateless, in-memory approach that processes security and observability data in real time. By integrating this capability into Falcon, CrowdStrike customers will be able to manage onboarding at a much faster pace and begin threat detection before data even hits the SIEM. This creates a more responsive security environment while also giving organizations tighter control of their telemetry.

The acquisition also has financial implications for customers. Smart filtering in the pipeline can cut data storage costs significantly, while real-time detection is expected to speed up incident response. CrowdStrike is highlighting advantages such as lower ingestion overhead, faster processing of events per second, and improved visibility for SOC teams that have struggled with legacy batch-and-store methods.

Most importantly, the deal removes one of the biggest bottlenecks in SOC transformation: the complexity of data migration. Instead of relying on third-party tools, customers will gain a native option for streaming and analysis within the Falcon platform. For CrowdStrike, this acquisition expands the scope of Falcon beyond security into broader data operations, while giving customers an immediate path to more autonomous, AI-driven defenses.