Derwent Labs
Track on RadarSecurity data pipeline that normalises all log sources to OCSF before SIEM ingest.
- Total raised
- —
- Employees
- —
- Founded
- —
- Momentum
- —
Data updated July 2026
About
About Derwent Labs
At a glance
Derwent Labs is a cybersecurity company specializing in Security Operations. It is privately held.
Derwent Labs is a security data normalisation platform that ingests security data from across an organisation's tool stack and maps it to the Open Cybersecurity Schema Framework (OCSF) before it reaches a SIEM or data lake. The platform operates as a pipeline layer between security data sources and downstream destinations. It offers 200+ pre-built connectors covering identity providers (Okta, Duo), endpoint detection tools (CrowdStrike), cloud platforms (AWS CloudTrail, Azure Monitor, GCP), CSPM tools (Wiz), vulnerability scanners (Tenable, Qualys), and more. All incoming data is automatically normalised to OCSF 1.7, a common schema that enables detections, dashboards, and queries to function consistently regardless of the originating source. Beyond normalisation, the pipeline supports in-flight enrichment — joining identity context from IdPs, asset posture from CSPM tools, and threat intelligence onto each event before it is forwarded. It also provides filtering capabilities to drop low-value events such as heartbeats and duplicate audit logs, with the platform achieving an average ingest reduction of 60–80%. Full-fidelity copies of raw data can be stored in object storage (e.g., S3) for historical replay against new detections. Destinations supported include Splunk, Microsoft Sentinel, Datadog SIEM, Elastic, Chronicle, Sumo Logic, and S3 data lakes. The platform supports dual-write to multiple SIEMs simultaneously, enabling migration or vendor diversification without data loss. Derwent Labs also offers a consulting service alongside its self-serve product. The platform is positioned for security operations teams looking to reduce parser maintenance, lower SIEM ingest costs, and write portable detections across multiple tools.
Momentum
How Derwent Labs is trending
No momentum signals yet
We score momentum from hiring, web, social, and funding velocity. Once signals accumulate this section will light up.
Valuation
What Derwent Labs is worth
Estimated valuation
Funding
Funding history
See every round, lead investor, and the full capital stack.
Open the full profile on Mandos to see funding history.
Public markets
Stock performance
Privately held
This company isn't publicly traded. Stock performance will appear here after an IPO.
Headcount
Headcount growth
Track hiring velocity, department mix, and seniority shifts.
Open the full profile on Mandos to see headcount growth.
Jobs
Open jobs
Every live posting, hiring pace, and role-level signal.
Open the full profile on Mandos to see open jobs.
Web traffic
Digital presence
Visits trend, bounce rate, engagement, and top countries.
Open the full profile on Mandos to see digital presence.
Tech stack
Technologies
The full stack behind the product — frameworks, clouds, security.
Open the full profile on Mandos to see technologies.
M&A
Acquisitions
Every acquisition this company has made, with dates and amounts.
Open the full profile on Mandos to see acquisitions.
Reviews & sentiment
Employee & product reviews
CEO approval, culture, comp, and detailed product ratings.
Open the full profile on Mandos to see employee & product reviews.
Leadership
Full leadership team
CEO, CxOs, VPs, and every exec with roles.
Open the full profile on Mandos to see full leadership team.
Competitors
Competitive landscape
The complete competitor set with overlap and positioning.
Open the full profile on Mandos to see competitive landscape.
News
Press & news coverage
The most recent mentions, announcements, and media coverage.
Open the full profile on Mandos to see press & news coverage.
Full profile
This public profile is a snapshot
The full Mandos profile of Derwent Labsadds funding rounds & investors, valuation estimates, headcount & hiring trends, technology stack, executive moves, and real-time monitoring.
FAQ
Frequently asked questions about Derwent Labs
Is Derwent Labs public or private?▾
Derwent Labs is a privately-held company.
What does Derwent Labs do?▾
Derwent Labs is a security data normalisation platform that ingests security data from across an organisation's tool stack and maps it to the Open Cybersecurity Schema Framework (OCSF) before it reaches a SIEM or data lake. The platform operates as a pipeline layer between security data sources and…
What category does Derwent Labs operate in?▾
Derwent Labs operates in the Security Operations category of the cybersecurity market.