Skip to main content

Sumo Logic to Acquire SOAR Provider DFLabs

Sumo Logic entered into an agreement to acquire DF Labs, a provider of security orchestration, automation and response (SOAR) software.

The acquisition will extend Sumo Logic’s cloud-native SIEM solution to help reduce or eliminate tedious and error-prone manual tasks and empower SOC teams to accelerate threat detection, analysis, incident response and forensic investigations.

The addition of DFLabs to the Sumo Logic Continuous Intelligence Platform will provide customers of varying sizes and maturities with comprehensive cloud-native security intelligence solutions built for today’s digital businesses that leverage modern applications, architectures and multi-cloud infrastructures.

“Security in the modern world is moving from a human-scale problem to a machine-scale problem,” said Greg Martin, VP and GM of Sumo Logic Security Business Unit. “Customers are looking for a new approach to help them overcome the pain and complexity around an increasingly perimeter-less world. The DFLabs team are experts in helping customers navigate this new world. By aligning our cyber security expertise, customer validated and leading security portfolios, we believe we will be able to address the critical challenges our customers face as they navigate this changing threat landscape.”

The Sumo Logic Continuous Intelligence Platform helps democratize security intelligence across hybrid and multi-cloud infrastructures as well as teams building and securing digital transformation initiatives. The platform delivers elastic scale for securing highly dynamic workloads, on-demand security analytics capacity and deployment agility, enabling new horizontal, collaborative and scalable workflows across security, IT and other lines of business.

DFLabs SOAR is in use by dozens of enterprises, helping modern security operations centers more effectively automate, orchestrate and measure security operations and incident response processes and tasks, all from one single, intuitive platform. Customers see as much as a 10x improvement in SecOps productivity when implementing IncMan SOAR.

As part of Sumo Logic’s Continuous Intelligence Platform, the company will expand its security intelligence portfolio with the launch of the Sumo Logic SOAR solution, which is expected to be available shortly after the closing of the transaction. Delivered as a service, at cloud-scale, these solutions will enable the linkage of upstream emerging DevSecOps models with the downstream SOC workflows, closing the loop for adaptive cloud scale defense. Sumo Logic SOAR will join the company’s Cloud SIEM offering as part of the Sumo Logic security intelligence suite of offerings including security analytics and security compliance.

“The team at DFLabs deeply understands the challenges facing the modern security practitioner, and we’ve purpose built our SOAR to help them dramatically improve their productivity,” said Dario Forte, CEO of DFLabs. “Joining Sumo Logic will be an exciting next step for all of us, as the value we believe we can provide together is very clearly understood. Best in class security operations solutions require broad functionality and deep integration to effectively address the modern threat environment, and when combined, the expanded Sumo Logic Cloud SIEM will provide best in class analytics and automation out of the box.”

The acquisition will broaden Sumo Logic’s portfolio as well as a rich joint ecosystem of customers and partners including MSPs, MDRs and VARs, while accelerating the companies’ mutual strategy to deliver the automation needed to modernize the SOC. Dario Forte and the entire DF Labs team will join Sumo Logic’s Security Business Unit. The addition of DFLabs employees will bolster Sumo Logic’s global engineering and cyber security domain expertise, as well as adding Milan, Italy, to the growing roster of offices around the world.

The transaction is subject to customary closing conditions, including certain government approvals in Italy, and is anticipated to close in the second quarter of fiscal 2022.

The Latest

In live financial environments, capital markets software cannot pause for rebuilds. New capabilities are introduced as stacked technology layers to meet evolving demands while systems remain active, data keeps moving, and controls stay intact. AI is no exception, and its opportunities are significant: accelerated decision cycles, compressed manual workflows, and more effective operations across complex environments. The constraint isn't the models themselves, but the architectural environments they enter ...

Like most digital transformation shifts, organizations often prioritize productivity and leave security and observability to keep pace. This usually translates to both the mass implementation of new technology and fragmented monitoring and observability (M&O) tooling. In the era of AI and varied cloud architecture, a disparate observability function can be dangerous. IT teams will lack a complete picture of their IT environment, making it harder to diagnose issues while slowing down mean time to resolve (MTTR). In fact, according to recent data from the SolarWinds State of Monitoring & Observability Report, 77% of IT personnel said the lack of visibility across their on-prem and cloud architecture was an issue ...

In MEAN TIME TO INSIGHT Episode 23, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses the NetOps labor shortage ... 

Technology management is evolving, and in turn, so is the scope of FinOps. The FinOps Foundation recently updated their mission statement from "advancing the people who manage the value of cloud" to "advancing the people who manage the value of technology." This seemingly small change solidifies a larger evolution: FinOps practitioners have organically expanded to be focused on more than just cloud cost optimization. Today, FinOps teams are largely — and quickly — expanding their job descriptions, evolving into a critical function for managing the full value of technology ...

Enterprises are under pressure to scale AI quickly. Yet despite considerable investment, adoption continues to stall. One of the most overlooked reasons is vendor sprawl ... In reality, no organization deliberately sets out to create sprawling vendor ecosystems. More often, complexity accumulates over time through well-intentioned initiatives, such as enterprise-wide digital transformation efforts, point solutions, or decentralized sourcing strategies ...

Nearly every conversation about AI eventually circles back to compute. GPUs dominate the headlines while cloud platforms compete for workloads and model benchmarks drive investment decisions. But underneath that noise, a quieter infrastructure challenge is taking shape. The real bottleneck in enterprise AI is not processing power, it is the ability to store, manage and retrieve the relentless volumes of data that AI systems generate, consume and multiply ...

The 2026 Observability Survey from Grafana Labs paints a vivid picture of an industry maturing fast, where AI is welcomed with careful conditions, SaaS economics are reshaping spending decisions, complexity remains a defining challenge, and open standards continue to underpin it all ...

The observability industry has an evolving relationship with AI. We're not skeptics, but it's clear that trust in AI must be earned ... In Grafana Labs' annual Observability Survey, 92% said they see real value in AI surfacing anomalies before they cause downtime. Another 91% endorsed AI for forecasting and root cause analysis. So while the demand is there, customers need it to be trustworthy, as the survey also found that the practitioners most enthusiastic about AI are also the most insistent on explainability ...

In the modern enterprise, the conversation around AI has moved past skepticism toward a stage of active adoption. According to our 2026 State of IT Trends Report: The Human Side of Autonomous AI, nearly 90% of IT professionals view AI as a net positive, and this optimism is well-founded. We are seeing agentic AI move beyond simple automation to actively streamlining complex data insights and eliminating the manual toil that has long hindered innovation. However, as we integrate these autonomous agents into our ecosystems, the fundamental DNA of the IT role is evolving ...

AI workloads require an enormous amount of computing power ... What's also becoming abundantly clear is just how quickly AI's computing needs are leading to enterprise systems failure. According to Cockroach Labs' State of AI Infrastructure 2026 report, enterprise systems are much closer to failure than their organizations realize. The report ... suggests AI scale could cause widespread failures in as little as one year — making it a clear risk for business performance and reliability.

Sumo Logic to Acquire SOAR Provider DFLabs

Sumo Logic entered into an agreement to acquire DF Labs, a provider of security orchestration, automation and response (SOAR) software.

The acquisition will extend Sumo Logic’s cloud-native SIEM solution to help reduce or eliminate tedious and error-prone manual tasks and empower SOC teams to accelerate threat detection, analysis, incident response and forensic investigations.

The addition of DFLabs to the Sumo Logic Continuous Intelligence Platform will provide customers of varying sizes and maturities with comprehensive cloud-native security intelligence solutions built for today’s digital businesses that leverage modern applications, architectures and multi-cloud infrastructures.

“Security in the modern world is moving from a human-scale problem to a machine-scale problem,” said Greg Martin, VP and GM of Sumo Logic Security Business Unit. “Customers are looking for a new approach to help them overcome the pain and complexity around an increasingly perimeter-less world. The DFLabs team are experts in helping customers navigate this new world. By aligning our cyber security expertise, customer validated and leading security portfolios, we believe we will be able to address the critical challenges our customers face as they navigate this changing threat landscape.”

The Sumo Logic Continuous Intelligence Platform helps democratize security intelligence across hybrid and multi-cloud infrastructures as well as teams building and securing digital transformation initiatives. The platform delivers elastic scale for securing highly dynamic workloads, on-demand security analytics capacity and deployment agility, enabling new horizontal, collaborative and scalable workflows across security, IT and other lines of business.

DFLabs SOAR is in use by dozens of enterprises, helping modern security operations centers more effectively automate, orchestrate and measure security operations and incident response processes and tasks, all from one single, intuitive platform. Customers see as much as a 10x improvement in SecOps productivity when implementing IncMan SOAR.

As part of Sumo Logic’s Continuous Intelligence Platform, the company will expand its security intelligence portfolio with the launch of the Sumo Logic SOAR solution, which is expected to be available shortly after the closing of the transaction. Delivered as a service, at cloud-scale, these solutions will enable the linkage of upstream emerging DevSecOps models with the downstream SOC workflows, closing the loop for adaptive cloud scale defense. Sumo Logic SOAR will join the company’s Cloud SIEM offering as part of the Sumo Logic security intelligence suite of offerings including security analytics and security compliance.

“The team at DFLabs deeply understands the challenges facing the modern security practitioner, and we’ve purpose built our SOAR to help them dramatically improve their productivity,” said Dario Forte, CEO of DFLabs. “Joining Sumo Logic will be an exciting next step for all of us, as the value we believe we can provide together is very clearly understood. Best in class security operations solutions require broad functionality and deep integration to effectively address the modern threat environment, and when combined, the expanded Sumo Logic Cloud SIEM will provide best in class analytics and automation out of the box.”

The acquisition will broaden Sumo Logic’s portfolio as well as a rich joint ecosystem of customers and partners including MSPs, MDRs and VARs, while accelerating the companies’ mutual strategy to deliver the automation needed to modernize the SOC. Dario Forte and the entire DF Labs team will join Sumo Logic’s Security Business Unit. The addition of DFLabs employees will bolster Sumo Logic’s global engineering and cyber security domain expertise, as well as adding Milan, Italy, to the growing roster of offices around the world.

The transaction is subject to customary closing conditions, including certain government approvals in Italy, and is anticipated to close in the second quarter of fiscal 2022.

The Latest

In live financial environments, capital markets software cannot pause for rebuilds. New capabilities are introduced as stacked technology layers to meet evolving demands while systems remain active, data keeps moving, and controls stay intact. AI is no exception, and its opportunities are significant: accelerated decision cycles, compressed manual workflows, and more effective operations across complex environments. The constraint isn't the models themselves, but the architectural environments they enter ...

Like most digital transformation shifts, organizations often prioritize productivity and leave security and observability to keep pace. This usually translates to both the mass implementation of new technology and fragmented monitoring and observability (M&O) tooling. In the era of AI and varied cloud architecture, a disparate observability function can be dangerous. IT teams will lack a complete picture of their IT environment, making it harder to diagnose issues while slowing down mean time to resolve (MTTR). In fact, according to recent data from the SolarWinds State of Monitoring & Observability Report, 77% of IT personnel said the lack of visibility across their on-prem and cloud architecture was an issue ...

In MEAN TIME TO INSIGHT Episode 23, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses the NetOps labor shortage ... 

Technology management is evolving, and in turn, so is the scope of FinOps. The FinOps Foundation recently updated their mission statement from "advancing the people who manage the value of cloud" to "advancing the people who manage the value of technology." This seemingly small change solidifies a larger evolution: FinOps practitioners have organically expanded to be focused on more than just cloud cost optimization. Today, FinOps teams are largely — and quickly — expanding their job descriptions, evolving into a critical function for managing the full value of technology ...

Enterprises are under pressure to scale AI quickly. Yet despite considerable investment, adoption continues to stall. One of the most overlooked reasons is vendor sprawl ... In reality, no organization deliberately sets out to create sprawling vendor ecosystems. More often, complexity accumulates over time through well-intentioned initiatives, such as enterprise-wide digital transformation efforts, point solutions, or decentralized sourcing strategies ...

Nearly every conversation about AI eventually circles back to compute. GPUs dominate the headlines while cloud platforms compete for workloads and model benchmarks drive investment decisions. But underneath that noise, a quieter infrastructure challenge is taking shape. The real bottleneck in enterprise AI is not processing power, it is the ability to store, manage and retrieve the relentless volumes of data that AI systems generate, consume and multiply ...

The 2026 Observability Survey from Grafana Labs paints a vivid picture of an industry maturing fast, where AI is welcomed with careful conditions, SaaS economics are reshaping spending decisions, complexity remains a defining challenge, and open standards continue to underpin it all ...

The observability industry has an evolving relationship with AI. We're not skeptics, but it's clear that trust in AI must be earned ... In Grafana Labs' annual Observability Survey, 92% said they see real value in AI surfacing anomalies before they cause downtime. Another 91% endorsed AI for forecasting and root cause analysis. So while the demand is there, customers need it to be trustworthy, as the survey also found that the practitioners most enthusiastic about AI are also the most insistent on explainability ...

In the modern enterprise, the conversation around AI has moved past skepticism toward a stage of active adoption. According to our 2026 State of IT Trends Report: The Human Side of Autonomous AI, nearly 90% of IT professionals view AI as a net positive, and this optimism is well-founded. We are seeing agentic AI move beyond simple automation to actively streamlining complex data insights and eliminating the manual toil that has long hindered innovation. However, as we integrate these autonomous agents into our ecosystems, the fundamental DNA of the IT role is evolving ...

AI workloads require an enormous amount of computing power ... What's also becoming abundantly clear is just how quickly AI's computing needs are leading to enterprise systems failure. According to Cockroach Labs' State of AI Infrastructure 2026 report, enterprise systems are much closer to failure than their organizations realize. The report ... suggests AI scale could cause widespread failures in as little as one year — making it a clear risk for business performance and reliability.