RunReveal

RunReveal makes it easy to collect your security logs and comes with the alerts every company needs.

[ClickHouse @ClickHouseDB]

ClickHouse Security is now in Private Preview!

An agentic SIEM built for the next decade of scale:

- Agents for triage, tuning, and hunting
- First-party source integrations + built-in pipelines
- Managed detections + BYO as code

https://t.co/vCOuWGnUmK

[evan j @ejcx_]

I'm in this video let's gooo

[Robby @robby_mtf]

So pumped for the @RunReveal x @ClickHouseDB acquisition to officially announce 🎉

RunReveal was one of the first (and largest) checks from @mtf_vc Fund 1 and I've had the BEST time working with this team 💜

From CISO dinners to RunReveal meetups to being Evan's #1 LinkedIn fan 😅 - it's been so fun being a small part of Team RunReveal

One of the most strategic acquisitions I've seen in 10+ years in venture. RunReveal was built on ClickHouse, enabling the fastest, most scalable SIEM. The official combo is 🔥

Evan + Alan are truly customer-obsessed founders and amazing humans who've built an insanely talented team

Can't wait to see what they do running ClickHouse Security! 🚀

[ClickHouse @ClickHouseDB]

Today we’re announcing the largest expansion of ClickHouse since we launched ClickHouse Cloud, and we’re welcoming the @xata team to ClickHouse.

ClickHouse now serves more than 5,000 customers, including DoorDash, Ramp, Meta, Tesla, Cisco, and Visa. What began as an open source analytical database is now a platform for the full set of data-intensive workloads behind modern applications.

Launching today 🚀

ClickHouse Managed Postgres is generally available.
ClickHouse Observability is in public beta.
ClickHouse Security is in private preview.
Langfuse AI Gateway is in public beta.

And with the acquisition of Xata, the agent-native Postgres company, we’re accelerating instant branching, cloning, and scale-to-zero environments for developers and AI agents. Welcome, Xata!

One open, composable foundation to build, observe, and secure applications.

Read the full announcement: https://t.co/F7admK9Ijg

[RunReveal @RunReveal]

We built RunReveal on @ClickHouseDB from day one. Today, it comes together with ClickHouse Cloud as ClickHouse Security, now in Private Preview.

Read the announcement from our co-founder Evan Johnson:
https://t.co/FRmzo5wt34

[RunReveal @RunReveal]

How do you develop the next generation of security leaders?

At RUNWAY, Joe Sullivan asked four security leaders, Ben Draffin, Derek Chamorro, Sneha Regmi, and Martin Choluj, what they’re doing to prepare the practitioners next up.

𝗔 𝗰𝗼𝗺𝗺𝗼𝗻 𝘁𝗵𝗲𝗺𝗲: 𝗴𝗶𝘃𝗲 𝗽𝗲𝗼𝗽𝗹𝗲 𝗺𝗼𝗿𝗲 𝗼𝗽𝗽𝗼𝗿𝘁𝘂𝗻𝗶𝘁𝗶𝗲𝘀 𝘁𝗼 𝗲𝘅𝗽𝗲𝗿𝗶𝗲𝗻𝗰𝗲 𝘁𝗵𝗲 𝗽𝗮𝗿𝘁𝘀 𝗼𝗳 𝘁𝗵𝗲 𝗷𝗼𝗯 𝘁𝗵𝗲𝘆’𝗹𝗹 𝗲𝘃𝗲𝗻𝘁𝘂𝗮𝗹𝗹𝘆 𝗻𝗲𝗲𝗱 𝘁𝗼 𝗼𝘄𝗻.

  1. Bring engineers into customer conversations.
  2. Give them opportunities to present.
  3. Expose them to how the security story gets told to the board.
  4. Let them own decisions, take risks, and be accountable for the outcome.

Different approaches, but a common thread: you learn leadership by getting opportunities to practice it.

A few perspectives from the panel ↓

[RunReveal @RunReveal]

We had the privilege of hosting over 130 security leaders and practitioners at RUNWAY last week.

People shared what they’ve built, where it broke, and what they’re figuring out next.

One theme kept coming up: useful AI investigations depend on good data and context.

We wrote about what we learned and how it’s shaping what we’re building.

Thanks to everyone who helped push that thinking forward.

Read our full RUNWAY takeaways here → https://t.co/GMOJVisHxu

[RunReveal @RunReveal]

We're still unpacking all the great conversations we had at RUNWAY about where security is headed.

The practitioners and leaders in this community are closest to how security work is changing every day. They came ready to share what they're building, where they're getting stuck, and what they're learning along the way.

That openness made the day. Honest questions, different perspectives, and people helping each other work through challenges they recognize from their own teams.

To everyone who showed up, spoke, asked a question, or kept a conversation going between sessions: thank you. You gave the whole room more to learn from.

We're grateful to be building alongside this community and excited to keep these conversations going.

[RunReveal @RunReveal]

[RUNWAY] Five days to go. Here’s what to know before you join us.

📍 Tuesday, September 29 | The Pearl, San Francisco
☕ Check-in & breakfast: 8–9 AM
🎤 Keynote: 9 AM

We’ll spend the day digging into detection engineering, AI security, autonomous investigation, and what it takes to lead and operate a security team right now.

There’s time built in to connect, too:
- Rooftop lunch with fellow attendees
- Conversations with speakers and peers throughout the day
- Optional happy hour at Sea Star from 5:30–7:30 PM

Come with the questions you’re working through and the experiences you’re willing to share.

Already registered? We’re looking forward to seeing you.

Still deciding? Tickets are free, with 8 spots left. If you’re a security practitioner or leader looking to compare notes with peers, we’d love to have you.

Full agenda → https://t.co/jdaD0tU90Y

[RunReveal @RunReveal]

What’s on security teams’ minds right now?

We asked practitioners joining us at RUNWAY what they’re most interested in. AI for security, threat detection and engineering, and security leadership topped the list.

If those are on your mind too, join us to explore:
- How teams are putting AI to work in detection and investigation
- What it takes to build better detections, starting with the data
- How security leaders are navigating AI adoption and changes to their teams

We’re bringing together practitioners and leaders to share what they’ve tried, what they’ve learned, and what they’re still figuring out.

Come connect + compare notes with people working through the same questions.

September 29 | The Pearl, San Francisco
Tickets are free, with limited spots left.

See the full agenda → https://t.co/jdaD0tU90Y

[RunReveal @RunReveal]

How are other security teams tackling the same challenges you are?

Join us at RUNWAY next Tuesday for three technical talks:

1️⃣ Retiring the SOC: Flexport’s Bet on Autonomous Investigation
Max Baumgarten, Flexport
Building autonomous detection and response with engineers owning threat response.

2️⃣ Semantic Detection Engineering
Mike Parowski, Harvey
A practitioner’s perspective, with time for your questions.

3️⃣ The Data Engineering Talk for Security Folks
Alan Braithwaite, RunReveal + Tristan Ahmadi, ClickHouse
Security data pipelines, schemas, and storage built for real query loads.

Compare approaches. Ask questions. Bring ideas back to your team.

📍 September 29 | The Pearl, San Francisco
🎟️ Free tickets. Limited spots left.

Explore the agenda and join us → https://t.co/jdaD0tU90Y

[evan j @ejcx_]

Excited for https://t.co/8rpciY6ZE0 next week. @RunReveal's first user conference with some of the best talks out there related to security & AI.

Security twitter, if you're in the bay area I would love to see you there!

[RunReveal @RunReveal]

Check it out here: https://t.co/dlpHw3XQvF

[RunReveal @RunReveal]

Your SOC just moved into Slack 👀 .

We built a RunReveal bot that brings full investigation power straight into your Slack threads. No more tab-switching between an alert and your SIEM.

An alert lands in your hashtag#securityalerts channel. You just @mention the bot right in that thread:

"@RunReveal is this alert actionable? Summarize what happened and who was involved."

Same agent, same tools as the console. It keeps thread context, so follow-ups don't need re-explaining. It respects your RBAC (DMs run as your role, channels run under the bot's role).

Slack and the web UI share one chat history too, so you can start an investigation in a thread and finish it in the console (or vice versa).

Security work happens where the alert happens, now your investigation can too 💥 .

Setup takes minutes: install the bot, link your account, start asking questions.

[RunReveal @RunReveal]

Happening this week, Austin 🤠 !

Join us for some awesome tech talks with local security practitioners at the AI for Security Mini-Con this Thursday from 12pm-5pm CDT.

Room is filling up, grab your spot now 👇
https://t.co/G47Vjz3uAA

[RunReveal @RunReveal]

Payment logs tend to pick up card numbers, billing zips, and cardholder names right along with the data you actually need for detection, and that quietly pulls PCI DSS scope into your logging stack (whether you meant to or not).

Here's a quick walkthrough of how to mask that data in RunReveal:
1️⃣ Connect a custom source
2️⃣ Map the fields
3️⃣ Add one pipeline rule

From there you can redact, hash, or partially mask whatever you choose, before any of it ever hits storage, and it takes no changes on the source side and no custom code to set up.

See full blog here ↓
https://t.co/uFzhRKyeQT

[RunReveal @RunReveal]

Hacker Summer Camp 2026: the highlights

Security hot takes from Daniel Stinson-Diess, Ben Draffin, Bil Harmer, Derek Chamorro, and the Formal team.

A dinner at Mizumi with DevArmor and C1 that ran way past dessert.

Security leaders comparing notes on what's actually making their lives easier at AI for Security Demo Day with Tobias Boelter.

All this in the Vegas heat 🔥 'Til next time!

[RunReveal @RunReveal]

Vegas heat in August: brutal.
RunReveal energy: unaffected.

[RunReveal @RunReveal]

AI agents in security operations need to work where investigations actually happen.

That’s why we’ve been expanding the RunReveal Agent beyond chat with:

- Slack support, so teams can bring the agent directly into incident channels
- Agent skills, so repeatable runbooks can become reusable workflows
- Context compaction, so long-running investigations can keep moving
- Token usage analytics, so teams can understand and manage AI spend
- A new runreveal CLI experience for working with the agent from the terminal

Security investigations are collaborative, messy, and often long-running. The agent should support that reality — not force analysts into a single interface or one context window.

Read more about what we shipped and why: https://t.co/GXKufCtV6G

[RunReveal @RunReveal]

We're getting the crew back together in Austin! 🤠

@ejcx_ is hosting a half-day meetup on Thursday, August 20th, this time with Kyle Polley, CISO, co-hosting.

Tech talks + time to meet fellow security folks. Whether you're a seasoned pro or just security-curious, request your invite for AI in Security Mini-Con here: https://t.co/2h3UXBUEgx.

It's free to attend!