Rethinking UEBA for the Modern Cloud

User and Entity Behavior Analytics (UEBA) has traditionally been about heuristics, thresholds, and a lot of manual investigation. In a world where identity fabrics span SaaS, cloud, and homegrown apps, and attackers move faster than ever, UEBA needs to be faster, more context-rich, and easier for analysts to act

Webinar Recap: From Code to Cloud — Closing the Gap Between AppSec and SecOps

RunReveal CEO Evan Johnson and DryRun Security CTO Ken Johnson discuss how AI is reshaping application security and security operations — covering AI SOC investigation, agentic code risks, and where human judgment still matters.

The AI-Native SIEM Must Be Programmable

Three different users will touch your security platform this week: a person clicking through the UI, a script running in CI, and an agent deciding what to query next during an investigation. Most products rush the API to build a pretty user interface and only think about programmatic access later,

6 Key Criteria for Evaluating a Modern SIEM

A buyer's guide for choosing a modern SIEM. Evaluate 6 criteria: architecture, pricing, AI investigation, unified workflow, search, and UX.

RunReveal vs. Panther: A Modern SIEM Comparison for Security Teams

Compare RunReveal's native SIEM features—storage-based pricing, native pipelines, and built-in AI—against Panther's AI SOC platform.

Elastic Is a Good Search Engine. It's a Complicated SIEM.

Compare RunReveal’s purpose-built SIEM, storage-based pricing, and native SQL detections against Elastic’s complexity, Logstash pipelines, and usage-based costs.

What do the tokens in an AI SOC cost? We ran some numbers.

AI SOC is everywhere right now, but few people are talking about what it actually costs to run. We pulled data from our investigations to show you the real token economics, model comparisons, and what an AI agent does step-by-step when it picks up an alert.

CMMC Level 2 is approaching. Here's the logging stack you need.

An estimated 80,000 defense contractors need CMMC Level 2 certification, and fewer than 500 had it as of late 2025. A SIEM covers the bulk of the audit logging, retention, and correlation controls. Here's what each one requires and how to meet them.

Detection Engineering Readiness Checklist: Is Your Security Stack Actually Built for It?

A practical detection engineering checklist for security engineers covering data pipelines, built-in detections, detection-as-code, AI triage, and continuous tuning.

Product Launch Featured

Introducing Object Storage Search with RunReveal

RunReveal's Custom Views feature now lets you search raw logs directly from any S3-compatible object storage bucket without ingesting the data into your SIEM. Query historical logs, cold storage, or data you've never indexed, using the same interface and AI agents you already use in RunReveal.

Featured

Automatically Investigate What Matters: Introducing Tier 1 Detections

Learn how to set up a complete detection and response program in an afternoon using RunReveal's out-of-the-box Tier 1 detections and AI SOC.

Product Launch

RunReveal Pipelines Integration with Object Storage Destinations

RunReveal Pipelines now support selective routing to object storage destinations. Instead of all-or-nothing data forwarding, you can match specific log sources and route only what you need .

Top 10 SIEM Vendors Shaping Modern Security in 2026

A practitioner's guide to the SIEM landscape, with an argument for why the data layer underneath your SIEM matters more than anything on the feature comparison page.

Introducing RunReveal in Kubernetes

RunReveal now deploys on Kubernetes — supporting in-VPC and on-premise deployments with no proprietary infrastructure requirements.

One Step Ahead: How Harvey Uses RunReveal for Proactive Network Threat Detection

Harvey processes ~8 TB of network data every day. See how their security team uses RunReveal to run real-time threat detection at scale, and why network logs are now their first line of defense.

RSAC 2026 Recap: Agents, tool sprawl, & chess

At RSAC 2026, three themes dominated security conversations: the rise of agentic SOC tools without clear adoption paths, growing demand for platform consolidation over point solutions, and widespread frustration with ingestion-based SIEM pricing.

RunReveal vs Splunk: A Modern SIEM Alternative for Security Teams

Tired of Splunk's unpredictable pricing and steep learning curve? See how RunReveal compares on cost, AI-native detection, pipelines, and ease of use, and why fast-growing security teams are making the switch.

Why Security Logging and Monitoring Is So Hard to Get Right

Security teams hoard data, fight slow search, and overspend on fragmented stacks. Learn the real trade-offs behind security logging and how to build a stack that actually works.

Product Launch Featured

Introducing RunReveal's Autonomous Security Operations Agent

Today we're announcing RunReveal's AI agent for security operations. This flexible agent automatically investigates alerts, responds in real time to changes in your infrastructure, and massively speeds up the incident response process. Our customers can start using this feature immediately. From MCP server to fully integrated

3 Free Steps to Prepare for Your Next Security Incident

RunReveal CEO Evan Johnson walks through key core steps to avoid chaos and prepare for security incidents.

Product Launch

Introducing Custom Views and Custom Role-Based Access Control

Today we're announcing two major capabilities in RunReveal, Role-Based Access Control (RBAC) and Custom Views. Together, these features give security teams the power to control exactly what data individual users can access, and create custom parsers and database views for any type of log data in just

2025 Recap: Just Keep Shipping

From AI agents to improved UX: All the things we shipped in 2025.

News

RunReveal Now Available on AWS Marketplace

Use pre-committed AWS spend to get RunReveal's unified and AI-first security data platform.

Responding to CVE-2025-55182: React4Shell

Our response to CVE-2025-55182: React4Shell

Product Launch Featured

Introducing the New RunReveal Log Explorer

RunReveal's redesigned log explorer improves security log analysis with better visibility, intuitive filtering, and AI-powered SQL queries.