Splunk Deepens Its Security Bench With TruSTAR Acquisition

The News: SAN FRANCISCO – May 18, 2021 – Splunk Inc. (NASDAQ: SPLK), provider of the Data-to-Everything Platform, today announced it has signed a definitive agreement to acquire TruSTAR, a San Francisco-based cloud-native security company providing a data-centric intelligence platform. Read the full release in Splunk’s Newsroom.

Analyst Take: Splunk continues to invest in complementary acquisitions that make its security portfolio more extensible and enable customers to scale their cybersecurity efforts.

TruSTAR isn’t a household name by any means. Still, Splunk’s mission continues to zero in on scaling its security business from SecOps tools to a full-scale cloud-based observability platform that enables enterprises to access all data sources and simplify intrusion detection at scale while also responding to threats using increased automation capabilities.

TruSTAR has recently been actively accelerating its ecosystem. In late March, the company announced a key partnership with ServiceNow to implement its Security Incidence Response (SIR) solution to prepare and normalize security intelligence data from multiple sources to distribute information between teams, industry peers, and other data systems. This partnership sought to accelerate automation to remediate threats more quickly. While this joint effort was only recently announced, TruSTAR has been partnering with ServiceNow for nearly 3 years.

The Challenge is in Network Complexity – Splunk Seeks to Simplify 

A modern network provides the enterprises with what is required to keep it secure, but it isn’t always intuitive as these insights are locked in the data. Furthermore, as networks continue to proliferate, including on-prem, hybrid cloud, and containerized nodes, it adds volume and complexity to the data. In its continued evolution, Splunk is looking to build and scale its solutions to make real-time information more accessible and create an end-to-end workflow that incorporates the latest in automation to quickly identify and remediate issues prior to any business disruption.

I see the acquisition as a layer in Splunk’s security platform, in particular, to support its automation, detection, and response workflows coupling broad data sets of first and third-party intelligence sources to leverage internal and historical intelligence sources.

This acquisition will also provide additional resources for TruSTAR customers, which will also be able to take advantage of community and freemium feeds from several of Splunk’s commercial threat intelligence integration partners, including Intel471, Recorded Future, and Mandiant.

Deal Details in Limited Supply

The Splunk press release didn’t provide much detail on the deal size or terms. I believe this is a strategic puzzle piece for Splunk to enrich the offering, and TruSTAR clearly had capabilities that could quickly and seamlessly incorporate into Splunk’s ecosystem. This type of deal fits the historical pattern at Splunk that has included several smaller acquisitions that add key features and match Splunk’s ambitions to scale its offerings and migrate to meet the complexities of shifting IT requirements and a growing focus on enterprise security.

Futurum Research provides industry research and analysis. These columns are for educational purposes only and should not be considered in any way investment advice.

Other insights from Futurum Research:

Juniper Gets More SASE

Cisco Nexus 400G: Delivering Ecosystem-wide Data Center Networking Innovation

Cisco’s Acquisition of Socio Labs Points to the Future of Hybrid Event Management Solutions

Image Credit: Splunk

 

 

Author Information

Daniel is the CEO of The Futurum Group. Living his life at the intersection of people and technology, Daniel works with the world’s largest technology brands exploring Digital Transformation and how it is influencing the enterprise.

From the leading edge of AI to global technology policy, Daniel makes the connections between business, people and tech that are required for companies to benefit most from their technology investments. Daniel is a top 5 globally ranked industry analyst and his ideas are regularly cited or shared in television appearances by CNBC, Bloomberg, Wall Street Journal and hundreds of other sites around the world.

A 7x Best-Selling Author including his most recent book “Human/Machine.” Daniel is also a Forbes and MarketWatch (Dow Jones) contributor.

An MBA and Former Graduate Adjunct Faculty, Daniel is an Austin Texas transplant after 40 years in Chicago. His speaking takes him around the world each year as he shares his vision of the role technology will play in our future.

Related Insights
August 4, 2026

Uncrewed Vessels Set to Revolutionize Anti-Submarine Warfare for Dutch Navy

Thales's selection to design uncrewed vessels for the Royal Netherlands Navy underscores OT/ICS security as defense's greatest challenge, with quantum-safe cryptography now standard....
Snyk's Evo COS: A Major shift in the Fight Against AI-Driven Cyber Threats
August 4, 2026

Snyk’s Evo COS: A Major shift in the Fight Against AI-Driven Cyber Threats

Snyk launches Evo, an AI-powered autonomous pentesting platform that continuously tests for vulnerabilities in AI-generated code, helping enterprises combat escalating cyber threats....
F5's Leadership in Cloud WAAP: A Major shift for Application Security?
August 4, 2026

F5’s Leadership in Cloud WAAP: A Major shift for Application Security?

F5 achieved Leader status in SecureIQLab's 2026 Cloud WAAP report with 92.7% Security Efficacy, reflecting surging enterprise API security investment and demand for integrated platform consolidation....
Is AI AppGen Security the Key to Managing the Expanding Attack Surface?
August 4, 2026

Is AI AppGen Security the Key to Managing the Expanding Attack Surface?

Orca Security launched AppGen Security to protect AI-generated code from tools like GitHub Copilot and Claude, addressing a cybersecurity market expected to hit $338B by 2029....
BlueAlly's Acquisition of GigaNetworks: A Strategic Move for Enhanced Security Solutions
August 4, 2026

BlueAlly’s Acquisition of GigaNetworks: A Strategic Move for Enhanced Security Solutions

BlueAlly Technology Solutions acquires GigaNetworks to expand enterprise security and network solutions expertise. The move positions the combined entity to serve customers demanding integrated capabilities across security and networking....
WidePoint's Upcoming Q2 2026 Call: What to Expect and Why It Matters
August 4, 2026

WidePoint’s Upcoming Q2 2026 Call: What to Expect and Why It Matters

WidePoint Corporation reports Q2 2026 earnings on August 13, highlighting $58M in contract wins for Trusted Mobility Management solutions and whether pipeline momentum drives revenue growth....

Book a Demo

Welcome

The vision behind everything in Futurum’s Custom Research practice is this: research should show you what is happening, what comes next, and what to do about it. It should be personal to each audience, easy for people to grasp, and structured so LLMs can reason over it accurately. And it should be fast and turnkey; you want answers now, not another project to carry for quarters.

Whether you are defining business, channel, or go-to-market strategy; evaluating vendors or justifying ROI; or commissioning research to fill an emerging market need, we have your back, with a program that answers your questions with the objectivity and credibility to drive real decisions.

To do it, we bring unmatched data to bear: Futurum research, surveys, and market projections; validated market feeds; ETR’s 15 years of insight from 10,000 technology decision-makers; G2’s buyer and user data; and what our analysts hear every day. Add leading primary collection, from AI-moderated voice interviews to surveys and analyst-led interviews, all turnkey, and every project comes out credible, nuanced, and actionable.

And we don’t just drop the results in your lap. For internal work, we provide analyst-led sessions, interactive dashboards, and a range of formats. For market-facing work, Futurum delivers turnkey activation and amplification that actually gets seen, by people and by LLMs, through our media and share of voice. This is research that moves decisions and markets.

We will meet you wherever you are, from a fast-turn brief to a multi-year program, and shape the work to your goals, timeline, and budget. The right program for your moment.

If any of this is useful, I would love to talk.

Benjamin Brown, VP Custom Research, Futurum Research

Benjamin Brown

VP, Custom Research · The Futurum Group

Newsletter Sign-up Form

Get important insights straight to your inbox, receive first looks at eBooks, exclusive event invitations, custom content, and more. We promise not to spam you or sell your name to anyone. You can always unsubscribe at any time.

All fields are required






Thank you, we received your request, a member of our team will be in contact with you.