Databricks pitches Lakewatch as a cheaper SIEM — but is it really?

Databricks has introduced Lakewatch, a new open agentic SIEM (Security Information and Event Management, a tool that collects and analyzes security logs from across a system) that aims to be cheaper than traditional security tools by charging based on compute usage rather than data ingestion. While analysts agree that SIEM costs are a real problem, they caution that Lakewatch's savings may be less straightforward than promised, since costs could shift from data storage to computing power rather than disappear entirely.