CrowdStrike Agrees to Acquire Onum to Supercharge Falcon Next-Gen SIEM

Real-time data pipeline platform eliminates migration barriers and delivers autonomous in-pipeline threat detection

CrowdStrike (NASDAQ:CRWD) today announced its intent to acquire Onum, a pioneer in real-time telemetry pipeline management. This acquisition evolves Falcon® Next-Gen SIEM into the definitive data foundation for agentic security and IT operations, eliminating onboarding friction while delivering autonomous detection capabilities.

"Our Next-Gen SIEM is the engine that powers the modern SOC, and data is the fuel that makes the engine run," said George Kurtz, CEO and founder of CrowdStrike. "Onum is both a pipeline and a filter, which will stream high-quality, filtered data directly into the platform to drive autonomous cybersecurity at scale. This is how we stop breaches at the speed of AI while giving customers complete control over their entire data ecosystem – well beyond cybersecurity."

The Falcon Platform: The Operating System of Cybersecurity

CrowdStrike's Next-Gen SIEM is driving adoption of the Falcon® platform as the operating system of cybersecurity. Every day, customers are discovering the power of Falcon's native, hyper-scalable data foundation to solve their most complex security and IT observability problems. Falcon Next-Gen SIEM is becoming synonymous with AI SOC transformation, unlocking new capabilities, cost efficiencies, and agentic speed that legacy platforms simply cannot match.

Onum: Autonomous Intelligence at the Data Source

Built on a proprietary stateless, in-memory architecture, Onum is the perfect complement to Falcon Next-Gen SIEM. The platform offers unparalleled speed, scale, and efficiency in onboarding to Falcon Next-Gen SIEM while giving customers control of their security and observability data. Onum brings Falcon's AI-powered detections directly to third-party data sources through in-pipeline analysis, starting detection before data even enters the Falcon platform.

Breakthrough Capabilities

Onum delivers transformational advantages across three critical dimensions:

• Speed: Delivers up to five times more events per second than its nearest competitor and processes security and observability data in real-time versus legacy batch and store methods.
• Cost: Smart filtering reduces data storage costs by up to 50 percent through intelligent optimization.
• Superior Outcomes: Real-time pipeline detection starts before data enters the Falcon platform, delivering up to 70 percent faster incident response with 40 percent less ingestion overhead.

Eliminating the Data Migration Bottleneck

Previously, migrating data into Next-Gen SIEM was the long pole in SOC transformation, often requiring third-party tools. The Onum acquisition eliminates the data migration bottleneck, removing friction and cost – delivering native data streaming and in-pipeline detection within the Falcon platform.

"Onum was founded on the belief that pipelines should do more than transport data, they should transform data into real-time intelligence," said Pedro Castillo, founder and CEO of Onum. "By joining CrowdStrike, we can deliver this vision at unprecedented scale to accelerate SOC transformation on a global scale. I'm incredibly proud of what our team has accomplished in defining real-time telemetry pipeline management, and we look forward to bringing that innovation to the Falcon platform."

About CrowdStrike

CrowdStrike (NASDAQ:CRWD), a global cybersecurity leader, has redefined modern security with the world's most advanced cloud-native platform for protecting critical areas of enterprise risk – endpoints and cloud workloads, identity and data.

Powered by the CrowdStrike Security Cloud and world-class AI, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence, evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities.

Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity and immediate time-to-value.

CrowdStrike: We stop breaches.

Learn more: https://www.crowdstrike.com/

Follow us: Blog | X | LinkedIn | Facebook | Instagram

Start a free trial today: https://www.crowdstrike.com/free-trial-guide/

© 2025 CrowdStrike, Inc. All rights reserved. CrowdStrike and CrowdStrike Falcon are marks owned by CrowdStrike, Inc. and are registered in the United States and other countries. CrowdStrike owns other trademarks and service marks and may use the brands of third parties to identify their products and services.

Forward-Looking Statements

This press release contains forward-looking statements that involve risks and uncertainties, including statements regarding the benefits of the acquisition to CrowdStrike and its customers, CrowdStrike's plans to integrate Onum's technology and operations, and the closing of the acquisition. You should not place undue reliance on these forward-looking statements, as actual outcomes and results may differ materially from those contemplated as a result of risks and uncertainties. There are a number of factors that could cause actual results to differ materially from statements made in this press release, including the satisfaction of conditions to closing the acquisition, CrowdStrike's ability to integrate Onum's technology and operations, and other risks described in the filings CrowdStrike makes with the Securities and Exchange Commission from time to time, including CrowdStrike's most recently filed Annual Report on Form 10-K, most recently filed Quarterly Report on Form 10-Q, and subsequent filings. All forward-looking statements in this press release are based on information available to CrowdStrike as of the date hereof, and CrowdStrike does not assume any obligation to update any of these forward-looking statements to reflect events that occur or circumstances that exist after the date on which they were made.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250827196288/en/

Media Contact

Jake Schuster

CrowdStrike Corporate Communications

[email protected]