Matano

Open-source, serverless security data lake for threat hunting and detection at petabyte scale on AWS.

PlatformWebfreemium

Matano is an open-source, serverless security data lake for AWS that normalizes security logs from 50+ sources into a structured, queryable format using open standards (Apache Iceberg, Elastic Common Schema). It supports writing detections as Python code, including automatic import of Sigma rules, and can be queried from tools like Athena, Snowflake, or Trino without copying data. A separate paid managed Cloud SIEM is also offered. It's built for security teams on AWS who want to reduce SIEM costs while keeping ownership of their data.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Matano - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Matano to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Matano (or something else) actually fits.

Try a problem