Gravwell Secures $15.4M to Expand Data Platform

From Stealth to Series A: The Journey

Gravwell emerged from stealth in October 2021 with a $3 million seed round backed by Next Frontier Capital, Kickstart Fund, and Revolution’s Rise of the Rest. Four years later, the company has quintupled its funding while maintaining focus on a clear mission: enabling organizations to analyze all their data without sampling, silos, or compromises.

The platform enables organizations to ingest, index, and query logs, network traffic, and event streams at scale, empowering security teams to investigate threats, detect anomalies, and meet compliance requirements. With a flexible ingestion engine and vendor-agnostic architecture, Gravwell delivers deep visibility across IT and OT (Operational Technology) environments—from traditional enterprise systems to industrial control systems and vehicle fleets.

Why Organizations Are Switching

Gravwell has achieved over 100% year-over-year growth fueled by both national and international demand, driven largely by organizations seeking a modern, high-performance alternative to legacy market leaders. The company competes with established players like Splunk, Elastic, and Devo, but differentiates through its approach to data handling.

“Built-from-scratch, Gravwell was designed to ingest data in its unprocessed format, operate at an enterprise scale with minimal maintenance, and provide best-in-class tools to investigators looking to find out what really happened,” said Corey Thuen, CEO and co-founder of Gravwell.

This design philosophy addresses a fundamental frustration in cybersecurity: “There are very few tools that actually scale past 40 terabytes per day and no one is collecting all the data they want. On our platform, they will never have to make a decision about which data to use or lose – it is all their data.”

The Emerging Challenge: AI Agent Oversight

Gravwell is tackling the emerging challenge of auditing AI agent activity, a capability that reflects how rapidly the threat landscape is evolving. As organizations deploy more autonomous AI agents for tasks ranging from customer service to infrastructure management, understanding what these agents are doing becomes a security imperative.

“With demand for both advanced log management and trustworthy AI oversight surging, the real time tools and solutions Gravwell provides have never been more critical,” said Mike Goguen, founder and managing partner of Two Bear Capital. “Gravwell gives enterprises the power to hunt threats, manage logs at scale, and audit what their AI agents are doing to deliver the visibility and trust modern security teams need to be safe and successful in business.”

What the Funding Enables

The new investment will accelerate the evolution of Gravwell’s product offering, enabling it to deliver solutions that address rapidly emerging use cases for data analysis and security. Funding will also support go-to-market strategies designed to build on the company’s current momentum.

Gravwell investors now include Two Bear Capital, Gula Tech Adventures, Innosphere Ventures Fund, Next Frontier Capital, Kickstart, and Rise of the Rest. The involvement of Two Bear Capital—a firm known for investing in breakthrough solutions to complex problems—signals confidence in Gravwell’s approach to data analytics.

Industry Context: The Data Volume Crisis

Enterprises aren’t just drowning in data—they’re making impossible choices about which data to keep. Log volumes continue exploding as organizations adopt cloud services, containerized applications, IoT devices, and industrial systems. Meanwhile, sophisticated threats require analyzing more data, not less, to detect.

This creates a fundamental conflict: traditional SIEM pricing models charge per gigabyte ingested or indexed, making comprehensive data collection prohibitively expensive. Organizations respond by sampling data, setting retention limits, or simply not collecting certain data sources—any of which could mean missing the signal that indicates a breach.

Gravwell’s architecture addresses this by treating data storage and analysis as separate concerns. Organizations can centralize massive volumes affordably, then query across all of it when investigating incidents—without the economic penalty that makes comprehensive data collection unfeasible on traditional platforms.

Competitive Positioning

Gravwell competes in the SIEM/data analytics space against well-established players with significantly larger market presence. However, the company has carved out a distinct position:

• Performance at Scale: Designed to handle 40+ terabytes per day without degradation
• OT/IT Convergence: Native support for both enterprise IT and operational technology environments
• Raw Data Philosophy: Stores data in unprocessed format for maximum investigation flexibility
• Minimal Maintenance: Built for enterprise scale without requiring large dedicated teams
• No Forced Trade-offs: Architecture eliminates the “collect or ignore” decision imposed by per-GB pricing

The company’s 100%+ year-over-year growth suggests this positioning resonates, particularly with organizations in critical infrastructure sectors where comprehensive visibility isn’t optional and OT security has become increasingly urgent.

What’s Next

With Series A funding secured, Gravwell is positioned to accelerate product development and market expansion. The company’s focus on emerging challenges—particularly AI agent auditing and OT security—positions it at the intersection of several high-growth cybersecurity trends.

“We are grateful to Two Bear Capital, Gula Tech Adventures, and all of our investors who understand our mission and believe in the company we are building,” Thuen said. The founders, Corey Thuen and Kris Watts, have built the company from its Coeur d’Alene, Idaho origins to its current Minneapolis headquarters while maintaining technical focus and customer-first approach.