Amazon acquires advanced threat detection startup Sqrrl, to boost the security of AWS; earlier reports pegged the deal at $40M+
- Amazon's cloud business has recently stepped up its efforts to pick up business from U.S. intelligence agencies. — Amazon's cloud business has acquired Sqrrl …
Context & Ripple Effects
This deal closes the loop on December's report that Amazon was in advanced talks for Sqrrl, a big-data threat-detection startup that had raised nearly $30M in venture funding. It is also AWS's second quiet security buy in just over a year, following the ~$20M harvest.ai acquisition in early 2017.
The timing matters because Amazon's cloud business has been stepping up its push to win work from U.S. intelligence agencies, where security credentials are the entry ticket. The acquisition fits the pattern CB Insights documented across Amazon's M&A and hiring data: deliberate pillar-building in AI and enterprise cloud alongside retail.
First-order effects
- Sqrrl's team and threat-analytics technology fold into AWS, giving Amazon an in-house capability it previously lacked rather than a third-party dependency.
- AWS gains a stronger security story at precisely the moment it is courting U.S. intelligence agencies as customers.
Second-order effects
- Rival hyperscalers competing for the same government and regulated-enterprise workloads face pressure to make comparable security acquisitions rather than rely on partnerships.
- Standalone threat-detection startups see their most likely acquirers shift from security vendors to cloud platforms — a dynamic visible on the buyer side too, where SentinelOne paid $155M for logging firm Scalyr to own more of its data stack.
Third-order effects
- If hyperscalers keep absorbing security specialists, the industry moves toward security being bundled invisibly into cloud platforms, shrinking the market for independent detection tools and raising the bar for what a security startup must be to stay independent.
- For government buyers, the concentration of security capability inside a few clouds sharpens the procurement question of whether national-security workloads should sit with one provider's proprietary stack.
The trend: Cloud platforms are acquiring security specialists to convert trust into a bundled feature of the platform itself, a consolidation wave that is steadily narrowing the space for independent threat-detection vendors.