ClickHouse acquires RunReveal to deepen its push into security analytics
What's the deal? ClickHouse has acquired RunRevealDealroom has a profile for this one. Try Dealroom →, a security platform that ingests, investigates and remediates security data. The startup was already built on ClickHouse's database before the deal, which brings in-house security expertise to the group. Terms were not disclosed.
Why now? Security data is straining databases. Cloud audit logs, identity events, endpoint telemetry and network flows generate constant streams that must be stored for years, retained cheaply, and queried fast enough for analysts responding to live incidents.
What's the endgame? ClickHouse wants to serve one of its largest and fastest-growing workloads more directly. RunReveal's experience should sharpen customer support through reference architectures, schema design guidance and retention policies, while tightening the link between customer needs and product development.
Crucially, ClickHouse says it will remain a neutral base for other companies building security products on its technology. RunReveal stays available under a bring-your-own-database model, letting customers keep data in a cluster they control. Existing contracts and support arrangements are unchanged.
The AI angle: ClickHouse highlighted RunReveal's work on agent-led investigations — tools that search across data sources, suggest and refine detections, and drive an inquiry toward a conclusion. The company argues investigations that once took hours must now finish in seconds.
That work is expected to shape how ClickHouse supports agentic analytics across its wider platform, both for its own products and for software firms building on the database. ClickHouse says security records are becoming vital for tracking what AI agents do inside corporate systems and for defending against threats that move at machine speed.
What could go wrong? ClickHouse now competes, in part, with the security firms it hosts. Keeping its promise to stay a neutral platform will be the test of whether partners keep building on it.
The signal: Database providers are moving closer to end-use applications where data volumes rise fastest. Security has become a proving ground for whether a database can ingest continuously, store years of records economically, and still return results quickly enough for front-line use — and ClickHouse is betting a specialist buy answers that question.
Read more: itbrief.co.nz
Image credit: U.S. Army Corps of Engineers Savannah District
