# How Exabeam uses ClickHouse for scalable, searchable security analytics

DevFeed: [How Exabeam uses ClickHouse for scalable, searchable security analytics](<https://devfeed.tech/articles/how-exabeam-uses-clickhouse-for-scalable-searchable-security-analytics-5245.md>)

Original publisher: [Read original article](<https://clickhouse.com/blog/exabeam-clickhouse-security-analytics>)

Author: ClickHouse

Published: 2025-09-11T13:46:05Z

Content type: article

Language: en

Sources: [ClickHouse Blog](<https://devfeed.tech/sources/clickhouse-blog.md>)

Topics: [clickhouse](<https://devfeed.tech/topics/clickhouse.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [threat detection](<https://devfeed.tech/topics/threat-detection.md>), [real-time](<https://devfeed.tech/topics/real-time.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [Database](<https://devfeed.tech/topics/database.md>), [Machine learning](<https://devfeed.tech/topics/machine-learning.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Generative AI](<https://devfeed.tech/topics/generative-ai.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [ai](<https://devfeed.tech/tags/ai.md>), [clickhouse](<https://devfeed.tech/tags/clickhouse.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [data](<https://devfeed.tech/tags/data.md>), [database](<https://devfeed.tech/tags/database.md>), [events](<https://devfeed.tech/tags/events.md>), [logs](<https://devfeed.tech/tags/logs.md>), [machine-learning](<https://devfeed.tech/tags/machine-learning.md>), [models](<https://devfeed.tech/tags/models.md>), [platform](<https://devfeed.tech/tags/platform.md>), [real-time](<https://devfeed.tech/tags/real-time.md>), [security](<https://devfeed.tech/tags/security.md>), [threat-detection](<https://devfeed.tech/tags/threat-detection.md>)

## AI overview

Exabeam uses ClickHouse Cloud as the real-time analytics engine for its security operations platform, processing millions of events per second and searching petabytes of log data across 10 global regions. The architecture supports AI- and machine-learning-based threat detection, sub-second investigations, and faster response while controlling compute costs.

## Source excerpt

Exabeam uses ClickHouse Cloud to power real-time, scalable security analytics--ingesting millions of events per second, cutting query times to sub-second, and reducing mean time to detection across 10 global regions.