Cribl, which helps companies monitor and analyze data created by their infrastructure, raises a $150M Series D led by Tiger, source says at a $2.5B valuation
Context & Ripple Effects
Cribl has been climbing steadily since Sequoia led its $35M Series B in late 2020, when the pitch was routing machine-generated infrastructure data to whatever monitoring tools customers already used. A year later it nearly doubled its valuation with a $200M Series C at $1.5B.
This Tiger-led $150M Series D pushes that to a reported $2.5B — and the trajectory held: two years on, GV led another $200M round plus a $119M secondary at $3.5B, and Cribl went on to buy AI threat-detection startup CardinalOps for around $100M, opening a Tel Aviv office.
First-order effects
- Tiger Global takes the lead seat from Sequoia, marking Cribl's shift from specialist infra backer to crossover-stage asset while handing the company fresh capital to scale its data-routing platform.
- A $2.5B valuation against last year's $1.5B sets a higher bar for any future raise or exit, locking in expectations of continued revenue growth in observability budgets.
Second-order effects
- Whoever controls the routing layer between cloud infrastructure and analytics tools gains pricing leverage over the downstream monitoring vendors it feeds — turning would-be competitors into customers negotiating through Cribl.
- Rival observability platforms face pressure to build or buy equivalent routing capability rather than cede the control point, accelerating M&A in adjacent data-pipeline tooling.
Third-order effects
- If the pattern holds, telemetry routing consolidates into a structural chokepoint of enterprise IT — a trajectory the CardinalOps acquisition later confirmed by extending the same control plane into security detection engineering.
- Late-stage funds like Tiger concentrating on fewer, larger infrastructure bets reinforces a barbell market where well-capitalized control-point companies absorb the rest.
The trend: Enterprise observability is consolidating around a data-routing control plane that sits between infrastructure owners and their analytics and security vendors.