- Home
- Threat Hunting Software
- Panther
Panther
A Panther platform overview identifies San Francisco as the company’s headquarters.
What it is
Panther is an AI SOC platform for security teams that ingests and normalizes security logs, detects threats, and supports investigation and response. Panther AI investigates alerts by querying the data lake, reviewing detection logic and alert history, and gathering context from connected tools. It can resolve noise and escalate high-confidence threats, while every AI action is visible, logged, and auditable. The AI Detection Builder turns plain-language threat descriptions into Python detections; teams can write, test, and version rules through CI/CD and GitHub code review. Panther supports Snowflake or Databricks as the security data lake, with data staying in the customer's chosen warehouse, and provides a REST API for supported entities. Deployment options include managed SaaS and Cloud Connected, where the customer owns AWS and the warehouse account while Panther manages the platform. Listed integrations include AWS CloudTrail, Okta, GitHub, Slack, CrowdStrike, Databricks, and PagerDuty. Pricing is on request, and a free trial is available. Panther states that it is SOC 2 Type 2 compliant, PCI compliant, and ISO 27001 certified.
For and against
For
- AI investigates alerts and escalates high-confidence threats.
- Detection rules can be written in Python.
- Supports Snowflake or Databricks data lakes.
- AI actions are logged and auditable.
Against
- Pricing is available on request.
- A free trial is available, but no free plan is listed.
- Cloud Connected requires customer-owned AWS and warehouse accounts.
The verdict
Panther combines log ingestion, alert investigations, and Python detection engineering for security teams. Consider its pricing-on-request model and deployment requirements when assessing fit.
Who it suits
Panther suits security teams seeking to automate SOC workflows and direct effort toward threat hunting and detection engineering. Its deployment options may suit teams that want managed service or to keep data in their chosen warehouse.
Plans and prices
Panther
Pricing is not listed; contact Panther for pricing.
Read 10 Oct 2026 · panther.com
On the record
- AI investigations
- Panther AI investigates alerts by querying the data lake, reviewing detection logic and alert history, and gathering context from connected tools.panther.com · read 10 Oct 2026
- Alert triage
- Panther AI autonomously investigates alerts and resolves noise, escalating high-confidence threats.panther.com · read 9 Oct 2026
- API
- Panther provides a REST API for interacting with alerts, users, rules, log sources, and other supported entities.docs.panther.com · read 10 Oct 2026
- Audit trails
- Panther says every AI action is visible, logged, and auditable.panther.com · read 9 Oct 2026
- Availability
- Panther states that it maintains 99.9% uptime through an SLA-backed availability commitment.panther.com · read 10 Oct 2026
- Company history
- Panther says it was built cloud-native in 2018.panther.com · read 10 Oct 2026
- Data lake
- Panther supports using Snowflake or Databricks for the security data lake, with data remaining in the customer’s chosen warehouse.panther.com · read 10 Oct 2026
- Data visibility
- Panther says it ingests log sources and attaches context automatically to support investigations.panther.com · read 9 Oct 2026
- Deployment
- Panther offers a managed cloud deployment and a deployment in the customer’s AWS environment using the customer’s Snowflake or Databricks account.panther.com · read 10 Oct 2026
- Detection builder
- The AI Detection Builder turns plain-language threat descriptions into production-ready Python detections.panther.com · read 9 Oct 2026
- Detection engineering
- Teams can write, test, and version detection rules in Python and manage them through CI/CD and GitHub code review.panther.com · read 10 Oct 2026
- Integrations
- Panther lists integrations for log sources, alert destinations, enrichment, data lakes, cloud resources, and MCP servers.panther.com · read 10 Oct 2026
- Intended users
- Panther presents its platform for security teams seeking to automate SOC workflows and shift effort toward threat hunting and detection engineering.panther.com · read 9 Oct 2026
- MCP integrations
- Panther AI can connect to MCP servers including Slack, PagerDuty, Notion, GitHub, and Atlassian.panther.com · read 9 Oct 2026
- Product
- Panther is an AI SOC platform for ingesting and normalizing security logs, detecting threats, and investigating alerts.panther.com · read 10 Oct 2026
- Security certifications
- Panther states that it is SOC 2 Type 2 compliant, PCI compliant, and ISO 27001 certified.panther.com · read 10 Oct 2026
- Support
- Panther offers technical support 20 hours a day, five days a week, and 24/7 on-call emergency support for customers.panther.com · read 10 Oct 2026
- Tenant isolation
- Panther says its customer data is isolated in dedicated instances.panther.com · read 10 Oct 2026
