Databricks Launches Lakewatch in Push Into SIEM Market

Databricks, best known for its lakehouse architecture combining data lakes and data warehouses, is expanding into security information and event management, or SIEM. Lakewatch is designed to consolidate cybersecurity, IT and business data in open formats, reducing the cost of moving data and running fragmented queries across traditional security tools. It allows companies to conduct monitoring and analysis on a single platform.

As of July 20, 2026, Databricks had launched Lakewatch in private preview, integrating Genie and Anthropic’s Claude to support natural-language queries, threat hunting and Detection-as-Code. The company has also strengthened its security analytics capabilities through its acquisitions of Antimatter and SiftD.ai, but has not announced a general-availability date or disclosed the acquisition values.