DBT Bureau
Pune, 2 Oct 2025
Databricks, the Data and AI company, launched Data Intelligence for Cybersecurity to help organizations defend against modern and AI-driven threats with more accuracy, stronger governance and greater flexibility. Data Intelligence for Cybersecurity seamlessly integrates with enterprises’ existing security stacks, unifying all data and leveraging an open partner ecosystem so security teams can fully harness the power of AI — spotting risks earlier, understanding the full context of an attack and responding with greater speed. Building on this foundation, Databricks Agent Bricks enables enterprises to build AI apps and agents that not only accurately analyze their data but also take safely-governed actions across every step of the security workflow.
Data fragmentation forces risky tradeoffs for security teams
Cyberattacks are becoming more advanced and widespread as attackers adopt AI. At the same time, many organizations struggle to use AI to respond effectively because of generic models and fragmented data, leading to slower responses, limited visibility and overall higher risk. Data Intelligence for Cybersecurity solves these challenges for customers and provides real-time intelligence with broad visibility and rich context about the organization, built on Databricks’ Lakehouse architecture. This enables security teams to detect hidden threats and respond quickly and effectively to increasingly sophisticated attacks.
Data Intelligence for Cybersecurity: Unified, AI-driven threat intelligence in real time
- Use AI agents for security at scale with Agent Bricks: Agent Bricks allows security teams to build and deploy production-ready AI agents with greater speed, accuracy and precision in handling threats.
- Conversational security and insights for everyone: With intuitive dashboards, AI-powered natural language search and real-time analytics, Databricks provides security experts and non-technical leaders alike with instant security insights to address emerging threats.
- Unify your security data foundation: Databricks’ industry-leading Lakehouse architecture pulls together enterprise data across every system for the most comprehensive view of the attack surface, free from legacy SIEM limitations and vendor lock-in.
“With Data Intelligence for Cybersecurity, Databricks is making data and AI every organization’s strongest defense strategy,” said Omar Khawaja, VP of Security and Field CISO at Databricks. “Security teams can now gain a more accurate, governed and flexible approach to building AI agents that proactively combat today’s modern and AI-based threats.”
Empowering cybersecurity teams
Leading customers have already transformed their security operations with Data Intelligence for Cybersecurity, reporting significant gains in detection speed, threat investigation and cost reduction:
- Arctic Wolf operates one of the largest data platforms in cybersecurity, processing over 8 trillion security events weekly while rapidly advancing AI-driven innovation to protect customers against current and evolving threats.
- Barracuda Networks transformed its detection engineering, with Databricks enabling a 75% reduction in daily processing and storage costs, real-time alerting in under 5 minutes, and empowering engineers to innovate on new threats instead of managing infrastructure.
- Palo Alto Networks unified fragmented security data and accelerated AI-powered threat detection features by 3x, resulting in reduced operational costs and real-time security insights across its global cloud ecosystem.
- SAP Enterprise Cloud Services processes threats faster than ever, reducing engineering time by 80% and increasing rule deployment speed over 5x – resulting in gains in speed, visibility, cost savings and full control over its data.
