About Exabeam
Exabeam was founded in 2013 by Nir Polak, Sylvain Gil, and Domingo Mihovilovic, based on the observation that many of the most damaging security breaches involve legitimate, already-authenticated user credentials being misused, whether by an external attacker who has stolen a valid employee's login credentials or by a malicious or compromised insider, a category of threat that traditional perimeter-focused security tools, designed primarily to keep unauthorized outsiders from getting in, are poorly equipped to detect once an attacker is already operating with valid, seemingly legitimate access.
Exabeam's platform combines security information and event management (SIEM) capabilities, meaning the aggregation and analysis of security log data from across an organization's systems, with user and entity behavior analytics (UEBA), which builds a behavioral baseline for what normal activity looks like for each individual user and system within an organization, then flags deviations from that baseline, such as a user account suddenly accessing systems or data it has never touched before, or logging in from an unusual location at an unusual time, patterns that can indicate a compromised account or malicious insider activity even when the specific actions taken don't match any known attack signature. This behavioral analytics approach has been particularly valuable for detecting slower-moving, more sophisticated attacks that unfold gradually and might otherwise blend into an organization's normal volume of security alerts, since Exabeam's technology can connect related but individually unremarkable events into a single, prioritized narrative of suspicious activity that a human security analyst can efficiently investigate. The company's customers span large enterprises across many industries seeking to modernize their security operations centers with more sophisticated behavioral detection capabilities beyond traditional signature and rule-based alerting. Exabeam has raised substantial venture funding from investors including Lightspeed Venture Partners, Icon Ventures, and Cisco Investments, reaching a valuation exceeding $2.4 billion, competing with other SIEM and security analytics vendors including Splunk, Microsoft Sentinel, and IBM QRadar.
