Gravwell
Gravwell builds a data-agnostic security and observability platform that ingests logs, network traffic, PCAP and binary data in native form, applying structure on read rather than at ingest.
Gravwell is a security and observability analytics company founded in 2016 and based in Idaho, USA. Its Data Analytics Platform ingests machine data - logs, network traffic, PCAP and binary data - in native form, without pre-parsing or normalization. A structure-on-read architecture means organisations store all their data and apply schemas at query time rather than at ingest, removing the need to decide in advance what to keep or how to format it.
The platform is used across cybersecurity, IT operations and operational technology (OT) environments, serving security operations centres and enterprise teams from small groups to large deployments. Technical work spans security analytics, log and network analytics, PCAP analysis, data ingestion and large-scale storage and querying. The stated aim is to make machine data usable for everyone, guided by the principle that “data is better together”.
Gravwell was founded by security practitioners Corey Thuen and Kris Watts, who built the company out of frustrations with legacy log and network analytics tools. The firm positions itself against pricing models that charge by data volume and, in its view, push teams to trade away visibility; its focus is on security outcomes rather than cost management of the data itself. The company is backed by Two Bear Capital, Gula Tech Adventures and Innosphere Ventures.
