- What: Databricks acquired cybersecurity startups Antimatter and SiftD.ai.
- Why: The acquisitions provide the core technology for Lakewatch, Databricks' new AI-driven security monitoring product.
- Context: The move follows a massive $5 billion funding round aimed at aggressive market expansion.
- Status: Lakewatch is currently in private preview; SiftD.ai deal closed on March 23, 2026.
Data intelligence giant Databricks has acquired two specialized cybersecurity startups, Antimatter and SiftD.ai, to anchor its entry into the AI-native security market. The dual acquisition, fueled by a recent $5 billion capital raise, directly underpins the launch of Lakewatch, a new security information and event management (SIEM) tool designed to monitor and protect complex AI workloads and data lakes.
The aggressive move signals a shift in Databricks' strategy as it transitions from a data storage and processing leader into a comprehensive AI infrastructure provider. By integrating native security monitoring through the Lakewatch platform, Databricks aims to solve the growing "visibility gap" that enterprises face when deploying large language models (LLMs) and massive datasets in production environments.
A Tale of Two Acquisitions: Stealth and Speed
The two acquisitions followed vastly different timelines, according to company disclosures. The deal for Antimatter was completed last year but remained undisclosed until this week. Antimatter’s technology focuses on data security and cryptographic infrastructure, providing a layer of protection that follows data regardless of where it resides.
In contrast, the acquisition of SiftD.ai was a high-speed maneuver. The deal reportedly "flew together" over the last two weeks, officially closing on Monday, March 23, 2026. SiftD.ai specializes in AI-driven threat detection and observability, which will likely serve as the "brain" of the Lakewatch monitoring system.
By combining Antimatter’s data-centric security with SiftD.ai’s real-time detection capabilities, Databricks is building a vertical security stack. According to reports from SiliconANGLE, Databricks plans to use these assets to enhance the Lakewatch platform's ability to identify anomalies within data lakes that traditional security tools might miss.
Introducing Lakewatch: The AI-Native SIEM
The centerpiece of these acquisitions is Lakewatch, an AI-driven SIEM built specifically for the modern data era. Traditional SIEMs often struggle with the sheer volume and unstructured nature of data used in AI training and inference. Lakewatch is designed to sit directly on top of the Databricks Data Intelligence Platform, providing native telemetry and protection.
Lakewatch is currently in private preview, with Databricks expanding its partnership ecosystem to support the rollout. The product is intended to provide a "single pane of glass" for security teams to monitor data access patterns, model behavior, and potential exfiltration attempts.
As enterprises increasingly move their most sensitive data into AI models, the "security of the model" and the "security of the data feeding the model" have become inseparable. Lakewatch aims to bridge this divide by leveraging SiftD.ai’s automation to sift through petabytes of logs to find legitimate threats.
The $5 Billion War Chest and Market Expansion
The acquisitions are the first major signs of how Databricks intends to deploy its massive $5 billion "war chest" from its most recent funding round. The company is no longer content with being a component of the tech stack; it is positioning itself as the entire foundation.
Industry analysts suggest that by moving into security, Databricks is moving into direct competition with established cybersecurity players and cloud providers like Microsoft (with Sentinel) and Snowflake (with its recently bolstered security features). However, Databricks’ advantage lies in its "Data Intelligence" approach—the idea that security is more effective when it is built directly into the data layer rather than bolted on afterward.
The company told TechCrunch that it is actively "looking for more" startups to acquire, suggesting that the Antimatter and SiftD.ai deals are only the beginning of a larger consolidation strategy.
Impact on Developers and the AI Industry
For developers and data scientists, the integration of Lakewatch could significantly lower the barrier to deploying AI in regulated industries. Currently, many AI projects are stalled in the "pilot" phase due to security and compliance concerns. If Databricks can provide a "one-click" security monitoring solution that is baked into the infrastructure, it could accelerate the time-to-market for enterprise AI applications.
For the broader industry, this move validates the emergence of "AI Security" (AISec) as a critical sub-sector. As cyber threats become more sophisticated through the use of generative AI, the defense mechanisms must be equally intelligent.
"This move transforms the data lake from a static storage vault into a proactive, self-defending fortress for enterprise intelligence."
The impact also extends to the startup ecosystem. Databricks' willingness to move quickly on deals like SiftD.ai suggests a highly competitive M&A environment for AI startups that solve specific "pain points" in the enterprise workflow—namely security, governance, and observability.
What’s Next: The Path to General Availability
While Lakewatch is currently limited to private preview participants, the integration of Antimatter and SiftD.ai’s technology is expected to accelerate the timeline for a broader release. Databricks has not yet provided specific pricing details for the new product, but it is expected to follow a consumption-based model consistent with its other platform offerings.
In the coming months, the industry will be watching for the first benchmarks and case studies coming out of the Lakewatch private preview. The ultimate test will be whether Databricks can prove that its native security is more effective at stopping modern breaches than the established, standalone security giants.
With $5 billion in the bank and a mandate to dominate the AI era, Databricks has made its intentions clear: security is the next frontier.