What the business is
Google Cloud sells cloud infrastructure and security tools; Siemplify makes a SOAR workbench for security operations centres.
The bet
Adding SOAR (security orchestration, automation and response) to Chronicle's telemetry platform is the logical next step to win security-operations customers.
Starting capital
Reportedly $500M.
How it started
Chronicle began as an enterprise security company in Google's X moonshot unit and moved into Google Cloud in 2019. Siemplify had its head office in New York, with R&D and founding in Israel.
What happened
On 4 January 2022 Google and Siemplify CEO Amos Stern confirmed the acquisition, earlier rumored in Israeli press. Google Cloud Security GM Sunil Potti said the intention is to integrate Siemplify into Chronicle to modernise and automate security operations.
What has to be true
Breaches kept rising as more infrastructure moved online, boosting demand for security services
Google Cloud was trying to expand enterprise revenue against Microsoft Azure and Amazon AWS
Chronicle had telemetry but lacked the SOAR layer analysts use to respond
Buying a startup with a mature product was faster than building SOAR in-house
What can be applied
A cloud vendor chasing enterprise revenue buys workflow software that sits on top of its telemetry, turning a data product into a daily-use security tool.
Aftermath
As of 4 January 2022 the deal was confirmed and Siemplify was to be folded into Chronicle; no integration milestones were reported in the article.
FOLLOW THE EVIDENCE