Exclusive: Daylight gives managed detection and response customers searchable telemetry without a SIEM

Israeli cybersecurity startup Daylight Security Inc. today launched Agentic Security Data Lake, a managed service that lets its managed detection and response customers retain years of security telemetry and search it without running their own security information and event management platform.

The service is aimed at security teams that have to keep telemetry around for compliance, audits, legal inquiries and old investigations but balk at the cost and upkeep of a full SIEM.

The issue is one whereby telemetry piles up from everywhere now: identity providers, cloud platforms, endpoints, software-as-a-service apps, email systems and the rest of the security stack. Keeping it is cheap enough. The trouble starts when someone needs an answer from data collected months or years earlier.

SIEM platforms became the standard fix, serving as the system of record that made all that data searchable. The economics soured as volumes grew. Ingesting, indexing and querying the data turned expensive and the infrastructure got harder to run, so some teams went hunting for a cheaper option.