SunnyData Highlights Databricks LakeWatch as Alternative to Traditional SIEM Tools

According to a recent LinkedIn post from SunnyData, the company is drawing attention to Databricks’ new LakeWatch offering as a different approach to security monitoring. The post contrasts LakeWatch with traditional SIEM tools, emphasizing an architecture built around low-cost data storage and the use of agentic AI for detection and response.

The post suggests that for existing Databricks users, LakeWatch may integrate more seamlessly because it leverages the same platform, governance model, and data contracts, effectively treating security telemetry as another workload. It also references a detailed write-up by a SunnyData team member comparing LakeWatch’s architecture and economics with incumbent solutions such as Splunk and Microsoft Sentinel, implying potential cost and efficiency advantages that could influence security spending patterns in the data and analytics ecosystem.

For investors, the focus on LakeWatch positions SunnyData as closely aligned with Databricks’ expanding security and observability stack, which may enhance its relevance in cloud data platform deployments. If LakeWatch gains traction against legacy SIEM providers, partners and specialists around the Databricks ecosystem, including firms like SunnyData, could see increased demand for advisory and implementation services tied to data governance, cost optimization, and AI-driven security analytics.