Thursday, Jul 8th 2021

The Tug of War Between Cybersecurity and Observability


In February 2021, CrowdStrike (CRWD) acquired Humio, a leader in cloud log management and observability services. At first glance, this didn’t seem to fit with Crowdstrike’s endpoint and cloud workload security platform. Then, just over a month later, Datadog (DDOG), a leading SaaS observability, monitoring, and analytics platform, acquired Sqreen, an application security management platform.

In other words, in the span of a month, we saw a leading cybersecurity company move into the observability space, and a leading observability company move further into the cybersecurity space.

More recently, Datadog announced an integration with Salesforce to provide Real User Monitoring (a core DDOG offering) and threat detection, a service strengthened by its Sqreen acquisition.

The respective acquisitions by CRWD and DDOG, along with Datadog’s recent announced integration with Salesforce, are evidence of an emerging trend in the SaaS landscape. We believe that observability and cybersecurity services will continue to merge into turnkey platforms, given the emergence of a distributed computing paradigm.

Turning to CRWD specifically, Humio’s ability to ingest and analyze both unstructured (e.g., text files, social media, satellite images) and semi-structured (i.e., tagged data not stored in a database) data broadens the scope of CrowdStrike’s value proposition to customers. It is estimated that 80%-90% of all data is unstructured, which is most effectively processed by artificial intelligence (AI) and machine learning (ML) models.

As a result, companies across industry verticals with leading AI/ML capabilities have an advantage in turning this data into actionable information for a better product and/or user experience. The quality of an AI algorithm is correlated to the amount of data used to train the program. All else being equal, the company with more data can develop better products through AI: exactly what CrowdStrike is executing on.

CrowdStrike’s leadership in endpoint and cloud workload protection is a direct result of its ability to process and analyze trillions of crowdsourced data points from across its customer base through its proprietary threat graph. Now, with the ability to process unstructured data alongside the structured data it was previously using for training, CrowdStrike continues to strengthen its core competitive advantage.

This is CrowdStrike pushing the flywheel so it spins faster: the more data it processes, the better its threat graph can detect and prevent attacks, the more customers will want to use the Falcon platform, the more data CrowdStrike collects. And so the cycle repeats.

In addition to the Humio acquisition adding to CrowdStrike’s data advantage, this move is another example of CrowdStrike finding ways to expand its TAM by expanding up and down the security stack.

CrowdStrike remains a core holding in the Titan Opportunities portfolio as the company continues to expand its runway for compounding capital at high rates of return. We are not making any changes to our CrowdStrike position at this time, as the company continues to demonstrate a superior ability to grow its top line and generate free cash flow. We believe CrowdStrike will continue to enhance its competitive advantage by investing in its superior product, developing new business lines, and expanding its addressable market: all resulting in, you guessed it, more data.

Back to Research ↗

Learn with titan

Investment articles and resources

Become the smartest investor you've ever been through straightforward, easy-to-read investment articles.

What Is Ethereum and How Does It Work?

What Is the Proof of Work (PoW) Algorithm?

What Are Decentralized Applications for Blockchain?

What Is Securitization? Definition and Examples

Let's Get Started

Ready to become a client?

Create an account with us in two minutes.

Or scan to get the app

We're building the best investment platform, ever

Titan Global Capital Management USA, Inc ("Titan") is an investment adviser registered with the Securities and Exchange Commission (“SEC”). By using this website, you accept our Terms of Use and Privacy Policy. Titan’s investment advisory services are available only to residents of the United States in jurisdictions where Titan is registered. Nothing on this website should be considered an offer, solicitation of an offer, or advice to buy or sell securities. Past performance is no guarantee of future results. Any historical returns, expected returns [or probability projections] are hypothetical in nature and may not reflect actual future performance. Account holdings are for illustrative purposes only and are not investment recommendations. The content on this website is for informational purposes only and does not constitute a comprehensive description of Titan’s investment advisory services.

Refer to Titan's Program Brochure for more information. Certain investments are not suitable for all investors. Before investing, consider your investment objectives and Titan’s fees. The rate of return on investments can vary widely over time, especially for long term investments. Investment losses are possible, including the potential loss of all amounts invested. The introducing Broker Dealer is Titan Global Technologies LLC, a registered broker-dealer and member FINRA/SIPC. Brokerage services are provided to Titan Clients by Apex Clearing, an SEC registered broker-dealer and member FINRA/SIPC. For more information, see our disclosures. Contact: 508 LaGuardia Place NY, NY 10012. Information provided by Titan Support is for informational and general educational purposes only and is not investment or financial advice.

© Copyright 2022 Titan Global Capital Management, Inc. All Rights Reserved.