Sumo Logic is a cloud-native log analytics and security operations company. Its platform collects logs from across an organisation’s applications and infrastructure and uses them for two jobs: detecting and responding to threats in the SOC, and monitoring and troubleshooting systems for SRE and DevOps teams.
On top of that data sits DojoAI, a set of AI agents for security investigations, incident response and root cause analysis.
At A Glance
| Vendor | Sumo Logic |
|---|---|
| Category | Cloud log analytics, SIEM and security operations |
| Deployment | Cloud-native, multi-tenant platform |
| Agentic AI | DojoAI agents, Mobot, MCP Server |
| Customers | Samsung, Infor, Ulta Beauty, HashiCorp, Endowus |
| Certifications | SOC 2 Type II, FedRAMP Moderate Authorized, ISO 27001, PCI DSS 4.0.1 |
| Founded | 2010, Redwood City |
What Sumo Logic Does
Security and operations teams often run separate tools that hold overlapping copies of the same logs. Sumo Logic puts both on one log platform built so that data is never dropped, and treats that telemetry as ready for AI agents as well as for people. Security analysts and engineers then investigate from the same records, and teams control what is ingested rather than choosing which sources they can afford to keep. The same data then serves threat detection, troubleshooting and the AI agents that work on both.
Products
SIEM
Analysts drowning in raw alerts are the target here. Instead of a single alert, the SIEM groups related signals into Insights, so an analyst opens a complete investigation. UEBA detects insider threats, compromised accounts and policy violations, and a MITRE ATT&CK coverage view shows which techniques the current detection rules cover and where the gaps are. Cloud SOAR adds automation and response alongside the SIEM, and Logs for Security extends investigation across cloud service logs from the same platform.
Log Analytics
Log Analytics is for engineers who need to find and fix production issues fast. AI-driven guided search helps them move from a symptom to the relevant log lines without writing complex queries.
Data Pipelines
Log volumes grow quickly, and so does the cost of storing them. Data Pipelines helps teams bring order to that data and lower total cost of ownership.
How It Works
Sumo Logic runs as a cloud service on a scalable, multi-tenant platform.
| Component | What it does |
|---|---|
| Collection and normalisation | The SIEM parses and maps structured and unstructured data into normalised records, so events from different sources can be correlated. |
| Behaviour baselines | UEBA builds a baseline of user and entity behaviour within minutes of data arriving. |
| Agents and interface | DojoAI agents work on the same platform data, and Mobot is the conversational interface people use to ask them questions. |
| Connectors | A catalogue of 450+ integrations, such as AWS CloudTrail, brings data in. |
Agentic AI Capabilities
SOC Analyst Agent
The SOC Analyst Agent, in Beta, triages and investigates alerts. It gives a verdict on alert severity, gathers related activity and explains impact and scope.
Knowledge Agent
The Knowledge Agent answers natural-language how-to questions through Mobot, with answers that cite documentation and product knowledge.
Root Cause Agent
The Root Cause Agent, in preview, investigates incidents for SRE and DevOps teams. It reviews alerts, inspects logs and metrics and gives an evidence-backed view of the likely cause of an incident, with workflow integrations and governance controls for running AI at scale.
MCP Server
A Model Context Protocol server, at prototype stage for select customers, connects customer-owned copilots, proprietary models and third-party AI systems to DojoAI.
Company Background
| Founded | 2010, by Kumar Saurabh and Christian Beedgen |
|---|---|
| Headquarters | Redwood City, California, United States |
| Ownership | Listed on NASDAQ on 17 September 2020; acquired by Francisco Partners and taken private in May 2023 |
| Leadership | Chris Malone (CEO), Tom Bonos (CRO), Conor Burns (CFO), Keith Kuchler (Chief Product & Technology Officer), Jeremy Powell (CISO) |
| Scale | Thousands of organisations worldwide use Sumo Logic as their data platform |
| Compliance | GDPR, HIPAA and CCPA in addition to the certifications listed above |
| Recognition | Included in the 2025 CRN Security 100, the 2025 Global InfoSec Awards and the 2025 Computing Security Excellence Awards |
Note: This overview is compiled from Sumo Logic’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.