Panther Labs Company Research Report

---

Company Overview

• Name: Panther Labs

• Mission: Panther’s mission is to make security teams smarter and faster than attackers by leading the evolution of security operations and helping teams overcome the challenges of detection and response at scale.

• Founded: Panther was founded by Jack Naglieri.

• Key People:

• CEO: William Lowe

• Founder & CTO: Jack Naglieri

• Head of Sales: John McCarthy

• Headquarters: No information is available

• Number of Employees: No information is available

• Revenue: No information is available

• Known For: Panther is known for its cloud-native security information and event management (SIEM) platform which offers flexible detection-as-code, intuitive security workflows, and actionable real-time alerts. The company was founded as a response to the inefficiencies and limitations of legacy SIEMs in handling the growth of cloud data.

Products

Overview

Panther provides a robust platform tailored for security operations in a cloud-first environment, offering a suite of features to help organizations efficiently detect and respond to security threats.

Key Products and Features

1. Petabyte-Scale Ingest:

• Parses, normalizes, transforms, and filters noisy logs such as CloudTrail and VPC Flow without infrastructure overhead.

2. Real-Time Alerts:

• Leverages streaming analysis and Detection-as-Code to deliver fast, actionable security alerts.

3. Security Data Lake:

• Provides affordable search and data retention to maintain compliance and investigate threats.

4. Detection-as-Code:

• Allows users to write, test, and deploy detection rules in Python for flexibility.

5. Unified Data Lake Search:

• Offers seamless searches across various log types for enhanced investigation capabilities.

6. Serverless Architecture:

• Utilizes AWS Lambda and data lake backends to scale automatically without maintenance overhead.

Recent Developments

Product Enhancements and Features

• PantherFlow: Introduced as a new pipelined query language, allowing for enhanced exploration and data analysis.

• CrowdStrike Event Streams: Enabled as a log source for ingesting logs from the Event Streams API.

• Slack Bot Integration: Enhanced with features to support alert response workflows.

• Splunk Alert Destination: Integration to send Panther alerts to Splunk.

• Support for AWS EKS & GCP GKE: Added data models for Kubernetes log fields.

• Two-way Sync with Jira: Facilitates alert status synchronization between Panther and Jira.

New Partnerships and Integrations

• Integration with Torq: New alert destination available for all customers in open beta.

• Detections for MongoDB Atlas: Newly added detection capabilities for enhanced visibility.

Case Studies and Applications

• Panther's capabilities have been prominently used by organizations like Spring Health, Tealium, Varo, Wolt, and GoFundMe to enhance their security operations and streamline workflows, demonstrating the platform's effectiveness across various industries.

Conclusion

Panther Labs is positioned as a leading provider of cloud-native SIEM solutions, offering advanced capabilities to address the complexities of modern security environments. Panther's focus on detection-as-code, real-time alerting, and seamless integrations provides organizations with the tools necessary for proactive threat detection and streamlined security operations.