Sumo Logic acquired FactorChain, an early stage security company with a Security Investigation Platform that makes transformational improvements in speed and depth of threat investigations, enabling resolution of complex threats spanning both IT and security in minutes instead of hours.

Combined with Sumo Logic’s machine data analytics strength across the cloud infrastructure, platform and application layers, this acquisition accelerates the development of a new class of converged IT ops and security solutions, which are essential for modern application delivery in the cloud.

“We are seeing more and more digital businesses struggling to adapt traditional security models to cloud and modern application delivery,” said Ramin Sayar, CEO of Sumo Logic. “Resolving which threats to assess in the avalanche of alerts and how to quickly resolve them is a challenging enough problem in traditional IT environments. However, in the dynamic large-scale cloud environment, this problem can’t possibly be answered without new thinking in security analytics and operations. The FactorChain acquisition accelerates our vision of a new model that converges operations and security in the cloud and provides innovative solutions to persistent challenges in investigation workflows at cloud scale. We’re thrilled to welcome the team onboard to drive our shared vision and disrupt traditional legacy SIEM markets moving too slowly to keep pace with accelerating cloud transitions.”

As part of Sumo Logic’s security analytics solution, FactorChain’s investigation platform will integrate completely into Sumo Logic’s SaaS Machine Data Analytics Platform, providing step function improvements in speed, accuracy, and retained learning of threat investigation workflows across IT and security. Integrated data, analytics and workflow will enable analysts to resolve complex investigations in minutes, while quickly identifying infection spread and applying accumulated learning across IT and security teams. Leveraging the FactorChain acquired domain expertise, natively developed capabilities to correlate and prioritize threats with unique insight across the application and infrastructure layer will focus joint security and IT teams on the right threats to investigate. Learning on both workflow and data models from these services will provide insight on other IT and security processes including alert tuning, configuration, policy, prioritization, etc.

“Cloud and modern application deployments demand a fundamentally new approach to security threat investigation – workflows must span both the application and infrastructure layers, integrate seamlessly across both security and IT ops, and enable resolution in minutes,” said Dave Frampton, founder and CEO of FactorChain. “FactorChain’s innovations in web speed contextual search, information models for rapid insight in large data sets, and investigation workflows which maximize human and machine synergy will combine with Sumo Logic’s machine data analytics platform to scale security for cloud and modern application delivery. We’re thrilled to join the Sumo Logic team and pursue our shared vision of a new converged security IT model for the cloud.”

As part of the acquisition, Sumo Logic has incorporated the entire FactorChain team along with industry veteran leadership into its engineering and product teams. Dave Frampton, FactorChain co-founder and CEO, will be VP of security solutions leading the company’s security analytics business. Ken Tidwell, FactorChain co-founder and CTO and former chief architect of ArcSight, will be VP of security engineering leading the security analytics development and architecture.