Case Study: Exabeam achieves sub-second security analytics at massive scale with ClickHouse Cloud

How Exabeam uses ClickHouse for scalable, searchable security analytics

Exabeam, a security operations platform, needed a real-time analytics engine to help reduce mean time to detection (MTTD) while handling massive security data volumes across its global operations. To support threat detection, investigation, and response, the company required fast, searchable analytics over petabytes of log data and millions of events per second.

Using ClickHouse Cloud, Exabeam built a scalable architecture with separated read, write, and merge workloads, hot-cold storage tiering, and a heavily optimized ingestion pipeline. ClickHouse helped Exabeam ingest up to 1.2 million events per second per region, store over 1 trillion events, cut query latency from more than 8 seconds to under 1 second for key searches, and improve ingestion throughput while lowering memory usage and operational overhead.

Exabeam

Vinayak Saokar

VP of Engineering