New SIEM integrations expand Druva’s security ecosystem to accelerate threat remediation

Druva, the leading provider of data security, today announced new and enhanced integrations with Palo Alto Networks, Splunk, and Sumo Logic to incorporate backup data telemetry directly into security operations tools. With these integrations, IT and security teams can now augment their Security Information and Event Management (SIEM) and extended detection and response (XDR) tools with backup data insights to strengthen incident response (IR) workflows. Druva’s extensive integration ecosystem delivers deeper visibility into data anomalies and empowers customers to actively leverage backup data to respond to and recover from cyber threats.

Nearly every ransomware attack last year targeted backup data. However, backup data is often siloed from broader security operations, making it difficult for security teams to detect, investigate, and respond to cyber threats effectively. By integrating backup telemetry into SIEM and XDR platforms, Druva bridges the gap between IT and security teams. Having end-to-end visibility across user activities, application logs, and backup telemetry enables accurate, faster threat detection and reduces the risk of data loss. With SIEM visibility combined with Druva’s proprietary Managed Data Detection and Response, businesses can also improve compliance with regulatory requirements and expedite time to insight for auditing purposes.

“Security teams don’t just need a wealth of data to defend against cyber threats, they need real-time, actionable insights to filter out the noise,” said Shankar Subramaniam, VP & GM of Security at Druva. “Druva’s enhanced integrations with Palo Alto Networks, Splunk, and Sumo Logic enable security teams to get end-to-end insights so they can accelerate incident response and mitigate threats before they escalate into a full-blown crisis. We’re constantly working to help customers safeguard their data, and our integrations should help reduce the business disruption caused by cyber attacks.”

Druva’s integrations with industry-leading SIEM platforms offers comprehensive threat monitoring and faster IR by incorporating backup data into security workflows. This enables security teams to benefit from:

• Real-Time Event Ingestion: Streamlines the collection of backup-related events, such as data access and file changes, to accelerate detection of threats.
• Streamlined Incident Correlation: Automates incident management to identify, escalate, and remediate threats faster, as well as correlate backup events with security data to improve IR.
• Bidirectional Remediation Actions: Leverages SIEM capabilities to quarantine compromised snapshots and initiate data restores directly from backups for faster remediation and minimal downtime.
• Enhanced Compliance and Reporting Support: Provides deep visibility into backup events to help meet regulatory and audit requirements.

Druva’s holistic approach to data security is designed to strengthen organizational cyber resilience, ensuring that backup data is continuously protected from emerging threats—without requiring separate security measures. These latest integrations complement Druva’s comprehensive set of partner integrations, which includes integrations with Microsoft, Okta, and ServiceNow.

“Organizations need a cohesive infrastructure of cyber and data security technologies to effectively keep threats at bay,” said Justin Iwaniszyn, Director, New and Emerging Alliances at GuidePoint Security. “Druva’s integration ecosystem helps extend the comprehensive protection offered by its fully managed Data Security Cloud, enabling customers to integrate backup data into security data workflows for even faster threat detection and response.”

Integrations with Palo Alto Networks, Splunk, and Sumo Logic are generally available today. To learn how Druva’s comprehensive integration ecosystem can strengthen cyber resilience, please visit the website.

About Druva

Druva is the leading provider of data security solutions, empowering customers to secure and recover their data from all threats. The Druva Data Security Cloud is a fully managed SaaS solution offering air-gapped and immutable data protection across cloud, on-premises, and edge environments. By centralizing data protection, Druva enhances traditional security measures and enables faster incident response, effective cyber remediation, and robust data governance. Trusted by over 6,000 customers, including 65 of the Fortune 500, Druva safeguards business data in an increasingly interconnected world. Visit druva.com and follow us on LinkedIn, Twitter, and Facebook.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250123042951/en/