aid: abstract-security
name: Abstract Security
description: >-
  Abstract Security is a security data platform and AI-powered composable SIEM founded in 2023 by
  Colby DeRodeff and Aaron Shelmire. Its streaming-first architecture ingests security telemetry from
  cloud, SaaS, endpoint and on-prem sources, then filters, normalizes, enriches and routes it in real
  time to SIEMs, data lakes and low-cost archives. The platform separates high-value detection data
  from long-term compliance retention so teams can cut SIEM ingest cost without losing visibility.
  Named components include Collection (the security data control plane), Detection Fabric,
  AI-Enabled SecOps, Retention, and the Abstract Intel Gallery (AIG) for operationalizing threat
  intelligence. The company publishes a catalog of roughly 230 source, destination and action
  integrations covering AWS, Microsoft Sentinel, CrowdStrike, Splunk, Google SecOps, Palo Alto
  Cortex XSIAM, SentinelOne, Elastic and Netskope, and its threat research group (ASTRO) publishes
  open YARA rulesets on GitHub. Abstract Security has raised roughly $28.5M from Munich Re Ventures,
  Crosslink Capital, Rally Ventures and Liquid 2 Ventures. As of this profiling pass the company
  operates no public developer portal, publishes no API reference or machine-readable contract, and
  routes platform access through a sales/demo motion.
image: https://cdn.prod.website-files.com/69847dcdf15f603ba59220d8/6a28780d0e4dcdad57e2b620_abstract-logo.png
url: https://raw.githubusercontent.com/api-evangelist/abstract-security/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
x-tier: profiled
x-tier-reason: 'enrichment pass 2026-09-06: full STEP 0b contract discovery run across every known
  host; no public developer portal, API reference or machine-readable contract found — a real
  /llms.txt was harvested and the stub Website (nasdaqprivatemarket.com) was corrected'
specificationVersion: '0.23'
created: '2026-09-06'
modified: '2026-09-06'
tags:
- Security
- Cybersecurity
- SIEM
- Security Data Pipeline
- Threat Detection
- Security Operations
- Log Management
- Data Streaming
- Observability
- Threat Intelligence
- Cloud Security
- AI Security
- Detection Engineering
- Data Routing
- Compliance Retention
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
  position: Producing
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.abstract.security/
- type: Blog
  url: https://www.abstract.security/abstract-canvas
- type: Support
  url: https://www.abstract.security/contact-us
- type: SignUp
  url: https://www.abstract.security/get-a-demo
- type: TermsOfService
  url: https://www.abstract.security/policies/terms-and-conditions
- type: PrivacyPolicy
  url: https://www.abstract.security/policies/privacy-policy
- type: GitHubOrganization
  url: https://github.com/AbstractSecurity
- type: Integrations
  url: https://www.abstract.security/integrations
- type: LinkedIn
  url: https://www.linkedin.com/company/abstractsecurity
- type: LLMsTxt
  url: llms/abstract-security-llms.txt
- type: DomainSecurity
  url: security/abstract-security-domain-security.yml
- type: Plans
  url: plans/abstract-security-plans-pricing.yml
- type: RateLimits
  url: rate-limits/abstract-security-rate-limits.yml
- type: Lifecycle
  url: lifecycle/abstract-security-lifecycle.yml
x-enrichment:
  date: '2026-09-06'
  status: minimal
  artifacts_added: 7
  pass: local-v3
x-coverage:
  state: gated
  reason: sales-gate
  detail: >-
    Abstract Security serves no developer portal or API reference at all — /docs, /developers, /api,
    /api-docs and /openapi.json every one 404 on www.abstract.security, the 348-URL sitemap contains
    no developer page, and the site navigation has no Developers section — while the API host named
    in the company's own TLS certificate (api.abstract.security, seen in Certificate Transparency)
    publishes no public DNS record, so the only route to the platform is the demo request form at
    /get-a-demo that routes to sales.
  evidence:
  - url: https://www.abstract.security/developers
    status: 404
  - url: https://www.abstract.security/openapi.json
    status: 404
  - url: https://www.abstract.security/get-a-demo
    status: 200
  - url: https://www.abstract.security/llms.txt
    status: 200
  checked: '2026-09-06'