Lakewatch
Agentic SIEM built on the Databricks security lakehouse: ingests and normalises security telemetry to OCSF, manages detections as code, and runs agents that author rules, triage alerts and hunt threats.
Find alternatives to Lakewatch
What it does
- Threat detection and response
Sources
- Pricing
-
The product page and documentation state no price during the private preview.
- Description
-
Official documentation · 18 Oct 2026
"Lakewatch security agents eliminate the manual detection lifecycle by automating rule authoring, data normalization and triage natively on the lakehouse."
- What it does
-
Official documentation · 18 Oct 2026
"Lakewatch unifies your data estate to power autonomous agents that hunt, triage and neutralize threats at machine speed."
- Sold within
-
The page says Lakewatch runs on the Databricks lakehouse and needs an active workspace, which is a requirement and not a statement of what plan includes it.
- Name
-
Official documentation · 18 Oct 2026
"Databricks Lakewatch: the agentic SIEM for security teams".
- URL
-
Official documentation · 18 Oct 2026
The product's own page, linked from the Product menu as "Security: Open agentic SIEM built for the AI era".
- Deployment
-
Official documentation · 18 Oct 2026
FAQ: "Lakewatch is a native application that runs on the Databricks security lakehouse ... an active Databricks workspace on AWS, Azure or GCP ... serverless compute".
- Interfaces
-
Official documentation · 18 Oct 2026
Documentation covers "Queries: Search, filter, and analyze your security data with SQL" and an "Alerts" investigation view inside the workspace.
- Intended for
-
Official documentation · 18 Oct 2026
"Transform your SOC"; "allowing your hunters to focus exclusively on high-fidelity defense".
Also from Databricks
-
Agent Bricks Agent platform
A control plane for building, evaluating, governing and monitoring AI agents across proprietary and open-source models, with native MCP support.
-
Databricks AI Search Data service
A managed hybrid semantic, keyword and vector search service (formerly Mosaic AI Vector Search) with automatic data sync and Unity Catalog governance.
-
Databricks Model Serving Model API
A managed endpoint service for deploying and governing classical ML models, generative models and agents from one interface.
-
Databricks Model Training Developer tool
A managed service for fine-tuning open-source LLMs or training custom models on enterprise data using dedicated GPU infrastructure.
-
Databricks AI Platform
Databricks' tooling for building, fine-tuning, serving and evaluating models and agents on lakehouse data.
-
Databricks Data + AI Platform Platform
Lakehouse platform for storing, governing, querying and sharing enterprise data.
-
AI/BI Application
AI-native business-intelligence product comprising AI/BI Dashboards (AI-assisted dashboard/visualization creation) and Genie Spaces (conversational natural-language exploration of data), built into the Databricks Data + AI Platform with Unity Catalog governance and no per-seat licensing.
-
Genie One Application
AI coworker (the evolution of the earlier Databricks Assistant/Genie) that lets business users ask questions, take action and drive outcomes over enterprise data via natural language, integrating with Slack, Teams, Jira, Google Drive and Salesforce, with mobile apps.
-
Unity Gateway Infrastructure service
Enterprise AI gateway providing centralized cost tracking/budgets, model access (Claude, GPT, Gemini, Grok and others), security/governance (access policies, PII/PHI filtering, audit trails), smart routing and observability across an organization's AI systems.
-
Document Intelligence Data service
Document Intelligence uses AI functions to parse, extract, and classify enterprise documents.
-
Databricks Feature Store Data service
Databricks Feature Store provides a governed layer for building, sharing, and serving machine learning features.
-
Genie Agents AI agent
Genie Agents answer natural-language data questions with SQL queries, result tables, and visualizations.
-
AI/BI Dashboards Application
AI/BI Dashboards provides AI-assisted authoring, data visualization and forecasting.
-
AI Runtime Infrastructure service
AI Runtime provides serverless GPU compute for training, fine-tuning and batch inference of custom models.
-
Genie Code AI agent
Autonomous AI agent for data teams inside the Databricks workspace: plans and runs multistep data engineering, data science, machine-learning and dashboard work in notebooks, the SQL editor and pipelines, grounded in Unity Catalog metadata.
-
Databricks CustomerLake Application
Agentic customer data platform embedded in Databricks: builds Customer 360 profiles with agentic identity resolution, syncs audiences to martech and adtech tools, and runs marketing agents that plan and personalise campaigns.
-
Databricks AutoML Developer tool
Automated machine learning that trains and evaluates classification, regression and forecasting models on a dataset, and writes an editable notebook with the training code for every trial.
-
Managed MLflow Developer tool
Managed MLflow on Databricks: experiment tracking, tracing, evaluation and model management for classical machine learning, deep learning, generative AI applications and agents, governed through Unity Catalog.
Open Databricks in the directory
Something wrong here? Send a correction — quote this product id: databricks-lakewatch.