Blogs
June 10, 2025 / June 10, 2025 by Matt Eberhart | Leave a Comment
Overview Security and observability teams evaluating Cribl are often focused on controlling data movement, optimizing storage costs, and building scalable pipelines. Cribl does this well. Projects often begin from a desire to reduce SIEM costs. But for security teams who need fast answers—not just better routing—Query solves a different problem. Cribl is helpful for managing […]
Read more »
May 22, 2025 / May 22, 2025 by Matt Eberhart | Leave a Comment
When we started Query, we weren’t chasing buzzwords. We set out to solve a painful, persistent problem in security: how to get answers from the data you already have without needing to move it, centralize it, or rebuild pipelines every time your environment changed. We believed then, as we do now, that the right data […]
May 19, 2025 / May 19, 2025 by Matt Eberhart | Leave a Comment
A Familiar Pattern with a New Twist Shadow IT was once an existential threat to enterprise security architecture. Employees and departments would adopt unsanctioned SaaS tools outside the purview of IT, creating blind spots and unmanaged risk. The industry responded with discovery tools, governance policies, and architectural patterns to bring these tools into the light. […]
May 8, 2025 / May 8, 2025 by Matt Eberhart | Leave a Comment
5 Reasons CISO’s Should Empower Teams to Use Amazon S3 for Security Data, Plus 2 You Might Not Expect Introduction Security leaders face a familiar, growing dilemma: they’re collecting more telemetry than ever, while budgets stay flat and analyst capacity remains constrained. The modern SOC must scale with data, not against it. The truth is, […]
April 29, 2025 / April 29, 2025 by Matt Eberhart | Leave a Comment
We’ve all heard the legend of the 10X developer. The engineer whose output and impact seem to exceed the work of ten others. It’s one of the great myths of software, and, like most good myths, it’s rooted in some truth. But what if the next generation of great software doesn’t start with the best […]
April 21, 2025 / April 21, 2025 by Matt Eberhart | Leave a Comment
This is part V of a series exploring the concepts and potential of Federated Security. See more. Federated Security is not a set of features, it’s a shift in how we think about turning more of the data we already have into a strategic advantage across security operations. It starts with a simple idea: instead […]
April 16, 2025 / April 16, 2025 by Matt Eberhart | Leave a Comment
Recently, I wrote about how the future of security operations is Federated – what we’re calling Federated Security. Query Founder, Dhiraj Sharan, expanded on the evolution of the Query CoPilot, and our Distinguished Engineer, Jonathan Rau, wrote about the future of Detection Engineering with Federated Search. Today, I’m going to show you how the future […]
April 9, 2025 / April 18, 2025 by Matt Eberhart | Leave a Comment
A few years ago, we set out to solve one of the oldest problems in security operations. Data is everywhere, but too often goes unused when it matters most. While you could argue that there is more data being used across security operations in recent years, the amount of data movement and duplication required to […]
October 15, 2024 / October 15, 2024 by Matt Eberhart | Leave a Comment
Two years ago, two of my three children were diagnosed with dyslexia. It came as a surprise and brought a wave of concern. What does this actually mean? Would this limit their ability to thrive at school and later in the “real world”? Would it impact their happiness? My wife Tina dove into the topic […]
May 21, 2024 / May 21, 2024 by Matt Eberhart | Leave a Comment
It’s been a full week since the 2024 RSA Conference in San Francisco, and I’m caught up and back to my normal routine. I really enjoyed meeting with customers, prospects, partners, and friends new and old, and felt a lot of optimism for the future. My favorite session of the week was by far the […]
