Splunk Deepens its Security Portfolio by Acquiring TruSTAR

The Six Five team explores Splunk’s acquisition of the cloud-native security company TruSTAR.

Watch the clip below:

If you are interested in watching the full episode you can check it out here.

Disclaimer: The Six Five Webcast is for information and entertainment purposes only. Over the course of this podcast, we may talk about companies that are publicly traded and we may even reference that fact and their equity share price, but please do not take anything that we say as a recommendation about what you should do with your investment dollars. We are not investment advisors and we do not ask that you treat us as such.

Transcript:

Daniel Newman: All right, so let’s get onto the fifth topic and this should be a quickie, Splunk. One of the companies that I’ve enjoyed talking about and we’re starting to get more involved in the show, made another acquisition this week. Now Splunk kind of long and short likes to, to brand itself as the provider of the data, to everything platform. So unlike some other companies we’ve talked about today, Splunk is not necessarily a household name, but essentially what it’s done is built this place form that has removed barriers between data and action, their focal points are IT, DevOps and security. Made an acquisition this week, smallerish acquisition. But if you don’t know, Splunk was a prem based observability platform or sorry, prem based Ops, SecOps platform that’s moved to an observability in the cloud platform to essentially allow an organization to use as kind of a wrapper, I call it, around all the organization’s data to be able to more rapidly, everything application to infrastructure, to security.

As we mentioned earlier in this pod, Pat, security is a massive issue. Companies are running up against it. Threats are coming from everywhere and the ability to not only have all the data available to identify, detect intrusion early on and deal with it, but you’re seeing more of a need for orchestration and automation. And so this TruSTAR acquisition that was made by Splunk really is set out to address that. This company, by the way, TruSTAR, while not a household name, like I said, has been busy in this space. Has been busy in this partnership. Most recently I believe they partnered up with ServiceNow. TruSTAR had been working with ServiceNow to build workflow orchestration automation, to reduce security threats and intrusion. And it’s like I said, it’s big thing is all about automation. It’s about you being able to take all the data sources, being able to in real time, automate the resolution of threats using AI, ML, automation and basically full visibility to data through the cloud.

No details, Pat, on the size of the deal. We don’t know if it was a million dollars or a billion dollars, but we do know that this company has been partnering with some of the world’s largest automation and technology and companies like Splunk, like ServiceNow. They’re in the right space. What’s interesting about Splunk is, like I said, is it’s not necessarily this known entity just yet. Their CEO, Doug Merritt, I’ve done a few interviews with him. He’ll be involved in something we’ll tell you more about in a moment, but what this company has done very well is acquiring smart pieces to the puzzle that has enabled it to move from this prem based IT Ops, SecOps tool to a full cloud tool set.

And Pat, by the way, in their recent comp event last year, Doug Merritt showed numbers about their annual recurring revenue growth. And he was able to show that and that Splunk’s growth actually outpaces some of the world’s fastest growing SaaS companies. Splunk is growing faster than Salesforce, faster than ServiceNow in terms of its recurring revenue and in cloud business growth. While it’s not known yet by everybody out there, if you are in IT Ops or SecOps, you probably know who they are. But Pat, December they acquired Flowmill, November acquired Rigor, October Plumbr. You’re talking about three acquisitions in three months. Last year, Streamlio, SignalFX, Omnition, KryptonCloud. Every one of these is a piece of the tool box that enabled Splunk to move to this full observability cloud.

Who else is in observability? IBM’s in observability. Who else? Cisco’s in observability. All the major cloud players are in observability. While every company is putting more effort, more time, making more investments in acquisitions, Splunk was ahead of the curve. It was early on this and now it’s making some really smart little add ons to its business, like TruSTAR that are enabling it to differentiate and be a best of breed solution in this particular space. I’m pretty bullish on the company. I know the leadership. I’ve found what they’re doing to be on the right track and you can’t argue with their growth.

Patrick Moorhead: Listen, Daniel, there’s no doubt that their customers and the enterprise know who they are and they’re in at least 90 out of a 100 Fortune 100 out there. And if you’re anywhere in the vicinity of cybersecurity, IT Ops and observability, you know this company. Splunk’s challenge is they need to have more horizontal uses to leverage big data. And this is what this is all about. This acquisition adds to their cybersecurity solution suite. And I think growing through small acquisitions to make the usability of big data is a smart thing. And it’s a natural thing for them. And like we’ve seen with Hadoop to Spark, to different big data tools, you’re always being eaten by that next startup and observability startups are coming out literally all over the place. I get pitched weekly on them. This latest one is using Snowflake. That’s their claim to fame. And they’re probably going to go right up against Splunk in the exact same area. Splunk needs to grow and it needs to grow fast. I like their multiple acquisitions.

Daniel Newman: Yeah, they’re on the right track. And Pat, I know we kind of debate whether or not to do this. I realize I may have been a little muddy so just to be very clear, I want to give you guys one sentence on what this means. This is a layer to their Splunk security platform, in particular support its automation, detection, response workflows and basically the ability to take first and third-party intelligence sources to leverage both internal and historic intelligence. That’s it. That’s what just happened. That came straight out of my blog. I read it because it was better thought out than anything that came to my mind when I was explaining it.

Author Information

Daniel is the CEO of The Futurum Group. Living his life at the intersection of people and technology, Daniel works with the world’s largest technology brands exploring Digital Transformation and how it is influencing the enterprise.

From the leading edge of AI to global technology policy, Daniel makes the connections between business, people and tech that are required for companies to benefit most from their technology investments. Daniel is a top 5 globally ranked industry analyst and his ideas are regularly cited or shared in television appearances by CNBC, Bloomberg, Wall Street Journal and hundreds of other sites around the world.

A 7x Best-Selling Author including his most recent book “Human/Machine.” Daniel is also a Forbes and MarketWatch (Dow Jones) contributor.

An MBA and Former Graduate Adjunct Faculty, Daniel is an Austin Texas transplant after 40 years in Chicago. His speaking takes him around the world each year as he shares his vision of the role technology will play in our future.

Related Insights
How Genesys and AWS Are Redefining AI-Driven Customer Engagement
July 24, 2026

How Genesys and AWS Are Redefining AI-Driven Customer Engagement

Keith Kirkpatrick, Vice President & Research Director, Enterprise Software & Di at Futurum, Genesys Cloud's expanded AWS partnership leverages agentic AI to transform enterprise customer engagement and enable autonomous interactions...
So This Is How AIs Attack- Observations From the OpenAI & Hugging Face Incident
July 24, 2026

So This Is How AIs Attack: Observations From the OpenAI & Hugging Face Incident

Fernando Montenegro and Mitch Ashley, VPs at Futurum, read the OpenAI and Hugging Face agentic incident as a live test of enterprise readiness to detect and contain AI agents that...
Nokia Q2 FY 2026 Optical Strength Positions Nokia for the AI Buildout
July 24, 2026

Nokia Q2 FY 2026: Optical Strength Positions Nokia for the AI Buildout

Futurum Research analyzes Nokia’s Q2 FY 2026 earnings, focusing on AI and cloud order strength, optical and IP demand, AI-RAN timing, and supply constraints....
Texas Instruments Q2 FY 2026 Earnings Climb on Broad-based Analog Growth
July 24, 2026

Texas Instruments Q2 FY 2026 Earnings Climb on Broad-based Analog Growth

Brendan Burke, Research Director at Futurum, reviews Texas Instruments' Q2 FY 2026 earnings, the broad industrial recovery, doubling data center revenue, and automotive re-acceleration....
AMD Helios Reaches Parity with Vera Rubin NVL72: Can Open Standards Outflank NVIDIA?
July 24, 2026

AMD Helios Reaches Parity with Vera Rubin NVL72: Can Open Standards Outflank NVIDIA?

Brendan Burke, Research Director at Futurum, examines AMD's Helios launch and whether spec advantages over Vera Rubin NVL72 and a bet on open standards can convert into data center share....
WEKA Engineers the AI Chassis to Conquer the Inference Power Paradox
July 24, 2026

WEKA Engineers the AI Chassis to Conquer the Inference Power Paradox

Brad Shimmin, VP and Practice Lead at Futurum, shares his insights on WEKA’s launch of the WEKApod 3 appliances and NeuralMesh 6 software. By taking total control of its hardware...

Book a Demo

Welcome

The vision behind everything in Futurum’s Custom Research practice is this: research should show you what is happening, what comes next, and what to do about it. It should be personal to each audience, easy for people to grasp, and structured so LLMs can reason over it accurately. And it should be fast and turnkey; you want answers now, not another project to carry for quarters.

Whether you are defining business, channel, or go-to-market strategy; evaluating vendors or justifying ROI; or commissioning research to fill an emerging market need, we have your back, with a program that answers your questions with the objectivity and credibility to drive real decisions.

To do it, we bring unmatched data to bear: Futurum research, surveys, and market projections; validated market feeds; ETR’s 15 years of insight from 10,000 technology decision-makers; G2’s buyer and user data; and what our analysts hear every day. Add leading primary collection, from AI-moderated voice interviews to surveys and analyst-led interviews, all turnkey, and every project comes out credible, nuanced, and actionable.

And we don’t just drop the results in your lap. For internal work, we provide analyst-led sessions, interactive dashboards, and a range of formats. For market-facing work, Futurum delivers turnkey activation and amplification that actually gets seen, by people and by LLMs, through our media and share of voice. This is research that moves decisions and markets.

We will meet you wherever you are, from a fast-turn brief to a multi-year program, and shape the work to your goals, timeline, and budget. The right program for your moment.

If any of this is useful, I would love to talk.

Benjamin Brown, VP Custom Research, Futurum Research

Benjamin Brown

VP, Custom Research · The Futurum Group

Newsletter Sign-up Form

Get important insights straight to your inbox, receive first looks at eBooks, exclusive event invitations, custom content, and more. We promise not to spam you or sell your name to anyone. You can always unsubscribe at any time.

All fields are required






Thank you, we received your request, a member of our team will be in contact with you.