Splunk Acquires Threat Intelligence Platform Provider TruStar

Splunk has reached an agreement to acquire TruStar, a threat intelligence platform provider. With the acquisition, TruStar will integrate its capabilities into Splunk's Data-to-Everything Platform, according to the companies. Financial terms of the deal were not disclosed.

This is technology M&A deal number 281 that MSSP Alert and sister site ChannelE2E have covered so far in 2021. See all technology M&A deals for 2021 and 2020 listed here.

Splunk customers will be able to use TruStar's capabilities to centralize threat data from a variety of sources, the companies said. TruStar also will enable Splunk customers to enrich their threat detection and response workflows with normalized intelligence from third-party and internal threat intelligence sources.

Furthermore, TruStar customers will be able to leverage community and freemium feeds from Intel471, Recorded Future and other Splunk threat intelligence integration partners, the companies noted. That way, these customers can use the feeds to speed up threat detection, response and remediation.

A Closer Look at TruStar

TruStar offers an intelligence management platform that enables threat data to be integrated into security analytics and security orchestration, automation and response (SOAR) workflows, Splunk Chief Product Officer Sendur Sellakumar said. It ensures that organizations can leverage automated threat intelligence to improve threat detection and response and cyber resilience.

Also, TruStar provides cloud-based data repositories (enclaves) to channel partners, the company indicated. Channel partners can use TruStar enclaves to manage threat intelligence sources and complex permissions.

TruStar supports Splunk's commitment to deliver "best-in-class" security capabilities to its customers, Sellakumar stated. It also could help Splunk further increase its cloud revenue.