Databricks Completes Acquisition of Panther: Accelerating the Security Lakehouse Era
Databricks finalized its acquisition of Panther, integrating the AI-driven security operations platform with its Lakewatch agentic SIEM to enhance real-time threat detection and response within a unified security lakehouse architecture.
The useful question is what changes for users, developers or buyers, and whether the announcement stays industry context or becomes something people can actually use.
Databricks announced the completion of its acquisition of Panther, an AI-powered security operations platform designed for modern threat detection. The deal aims to integrate Panther’s operational workflows and integrations with Databricks’ Lakewatch agentic SIEM, which operates on an open security lakehouse foundation. The combined platform seeks to address limitations of legacy SIEM systems by enabling real-time analysis of petabyte-scale telemetry across cloud, identity, and SaaS environments.
The acquisition addresses a longstanding trade-off in security operations: either ingest vast data volumes at high cost or limit ingestion to control expenses, often leaving gaps in coverage. Panther’s 100+ out-of-the-box integrations and mature SOC workflows will now operate atop Lakewatch’s open data foundation, eliminating the need for analysts to manually correlate logs from disparate sources. This integration promises to streamline detection, investigation, and response by unifying security, IT, and business telemetry in a single governed architecture.
Lakewatch serves as the core of the security lakehouse, providing high-fidelity data collection and governance at scale. Panther complements this by embedding software-driven AI workflows directly into the data layer, enabling autonomous agents to triage alerts, refine detection logic, and execute response actions. The partnership positions security teams to deploy agentic automation that operates at machine speed, reducing reliance on manual processes and improving response times.
Both Databricks and Panther emphasize an open ecosystem, contrasting with legacy SIEM providers that rely on proprietary formats and high ingestion fees. The combined platform ensures customers retain ownership of their data in accessible formats, allowing interoperability with third-party tools. The acquisition underscores a shift toward agentic security operations, where AI-driven automation and open data architectures enable organizations to keep pace with evolving threats.