Arctic Wolf & Databricks partner to scale real-time security data

Arctic Wolf has announced a partnership with Databricks to scale its Aurora Platform by integrating Databricks' Data Intelligence Platform to enhance real-time security data processing and strengthen its service offerings.

The Aurora Platform is recognised for its capability to ingest and process substantial volumes of security telemetry. Arctic Wolf reports that the platform manages more than eight trillion security observations each week and over 300 petabytes of data each year. With the new integration, Arctic Wolf aims to unify data streams from endpoints, cloud applications, identity systems, firewalls, and other sources into a singular, high-throughput environment.

Data growth

As security environments evolve, organisations continue to deploy additional security tools and cloud systems, leading to increasing volumes and types of telemetry. This expansion, combined with the pace at which data arrives, presents a significant challenge for security teams tasked with identifying and responding to threats promptly.

Arctic Wolf has contended that even well-resourced teams can become overwhelmed by these growing datasets without an appropriate technology platform operating at the necessary scale. The Aurora Platform's integration with Databricks' Data Intelligence Platform is intended to address this challenge by accelerating the unification and analysis of these diverse telemetry sources.

Enhanced operations

"Modern cybersecurity is a data scale problem. The volume, variety, and velocity of telemetry demand a platform that can turn complexity and noise into clear outcomes," said Dan Schiappa, President, Technology and Services, Arctic Wolf. "Partnering with Databricks gives us the scalable foundation to action one of the industry's most diverse security datasets for faster and better threat protection for our customers. It enables us to grow the Aurora Platform, expand our AI-powered SOC, and deliver faster, more reliable protection for our customers."

The partnership supports Arctic Wolf in delivering security intelligence to over 10,000 customers globally. The Aurora Platform's architecture makes use of Databricks' AI-driven data infrastructure to enable the company and its partners to scale local security offerings and strive for improved customer outcomes.

AI-driven intelligence

In addition to the platform integration, Arctic Wolf's Alpha AI suite continues to drive the company's efforts in predictive and generative AI applications in security operations. According to Arctic Wolf, Alpha AI draws on over 10 million hours of Security Operations Centre (SOC) experience accumulated over a decade, and is continually refined by a wide and varied range of security telemetry.

Alpha AI is designed to reduce the number of unnecessary alerts, speed up investigation workflows, and help customers focus on the most relevant threats. These features are integrated as part of the ongoing development in the Aurora Platform, which benefits from the new data capabilities powered by Databricks.

Unified and protected data

"Running security operations at scale demands a data architecture optimised for performance, agility, and real-time insights. Arctic Wolf is a leader in this space, having pioneered a unified approach to security operations through a single, integrated platform," said Omar Khawaja, Databricks Field CISO, VP Security. "By integrating the Databricks Data Intelligence Platform with Arctic Wolf's Aurora Platform, we're enabling them to fully harness the power of their security telemetry, driving faster, smarter decisions across one of the world's largest commercial Security Operations Centres."

The companies have highlighted the use of Databricks Data Intelligence Platform's lakehouse architecture, which is said to support the secure collection, governance, and protection of security telemetry. This approach is intended to bolster Arctic Wolf's security controls and support compliance requirements across its customer base.

By building on this foundation, Arctic Wolf believes it can support real-time threat detection, enable open integrations, and provide advanced, AI-driven analytics.