SentinelOne to Acquire Observo AI for SIEM and Security Operations

SentinelOne has announced its intent to acquire Observo AI, which offers a data streaming platform for AI-native telemetry pipeline management. The deal is intended to serve as an immediate complement and catalyst to SentinelOne’s AI SIEM and data offerings.

Observo delivers an AI-native, real-time telemetry pipeline that ingests, summarizes, and routes data across the enterprise—before it ever reaches a SIEM or data lake. The stated value proposition is to reduce costs, improve detection, and increase speed.

“Security is, at its heart, a data problem, and legacy, rules-based data pipeline platforms simply weren’t built for today’s ever-growing attack surface and data rich security operations,” said Tomer Weingarten, CEO and Co-founder of SentinelOne. “Observo AI will uniquely benefit customers with an AI-native data architecture — one that is open by design, intelligent by default, and built for the scale and speed needed for autonomous security operations. As a result, we can deliver significant new customer and partner value – and customer and partner choice – by allowing for fast and seamless data routing into our AI SIEM, or any other destination.”

Features include support for open formats like OCSF, JSON, OTLP, and Parquet; AI-based classification, masking, correlation, and summarization; and enhanced cost efficiency. Designed for enterprises with thousands of data sources, Observo AI includes centralized fleet management, zero-touch updates, PII masking, and automated discovery of new data types.

SentinelOne will acquire Observo AI for an undisclosed combination of cash and stock. The transaction is expected to close in SentinelOne’s third quarter of fiscal year 2026, subject to any applicable regulatory approvals and customary closing conditions.

Channel Impact^®
The objective is to help channel partners and SOC teams resolve threats faster, cut data costs, and simplify operations across the entire environment.