Lakewatch

Platform

Agentic SIEM built on the Databricks security lakehouse: ingests and normalises security telemetry to OCSF, manages detections as code, and runs agents that author rules, triage alerts and hunt threats.

Find alternatives to Lakewatch

TypePlatform
RoleBundled component
AvailabilityDemonstrated, not sold
DeploymentSaaS
Intended forEnterprise
SecurityNot recorded
StatusBeta
Sold withinDatabricks Data + AI Platform
PricingNot recorded

What it does

databricks.com

Sources

Pricing

Not found · 18 Oct 2026

The product page and documentation state no price during the private preview.

Description

Official documentation · 18 Oct 2026

"Lakewatch security agents eliminate the manual detection lifecycle by automating rule authoring, data normalization and triage natively on the lakehouse."

What it does

Official documentation · 18 Oct 2026

"Lakewatch unifies your data estate to power autonomous agents that hunt, triage and neutralize threats at machine speed."

Sold within

Not found · 18 Oct 2026

The page says Lakewatch runs on the Databricks lakehouse and needs an active workspace, which is a requirement and not a statement of what plan includes it.

Name

Official documentation · 18 Oct 2026

"Databricks Lakewatch: the agentic SIEM for security teams".

URL

Official documentation · 18 Oct 2026

The product's own page, linked from the Product menu as "Security: Open agentic SIEM built for the AI era".

Deployment

Official documentation · 18 Oct 2026

FAQ: "Lakewatch is a native application that runs on the Databricks security lakehouse ... an active Databricks workspace on AWS, Azure or GCP ... serverless compute".

Interfaces

Official documentation · 18 Oct 2026

Documentation covers "Queries: Search, filter, and analyze your security data with SQL" and an "Alerts" investigation view inside the workspace.

Intended for

Official documentation · 18 Oct 2026

"Transform your SOC"; "allowing your hunters to focus exclusively on high-fidelity defense".

Also from Databricks

Open Databricks in the directory

Something wrong here? Send a correction — quote this product id: databricks-lakewatch.