Proofpoint Delivers Threat Context into Splunk Software

Multiple technology integrations enable Proofpoint email and social media context to be easily ingested into Splunk’s analytics-driven security platform


Sunnyvale, Calif.—June 7, 2016 – Proofpoint, Inc., (NASDAQ: PFPT), a leading next-generation cybersecurity company, today announced an alliance with Splunk® to deliver customers value by providing data integrations into the Splunk security platform from Proofpoint’s email, social media, and threat intelligence solutions. These integrations provide customers with the ability to easily benefit from Proofpoint’s threat context, within the end-to-end security intelligence provided by Splunk software.


“Organizations typically have 50-100 different security and network solutions depending on their size. This heterogeneity makes it difficult for security teams to scale and respond,” said Christian Christiansen, program vice president of IDC’s Security Products group. “The Proofpoint alliance with Splunk reduces the need for handcrafted integrations while providing greater data analysis into how organizations are vulnerable, targeted, and breached."


Available today, customers can use the new Proofpoint Protection Server Technology Add-on (TA) to send data from Proofpoint’s leading Enterprise Protection email solution into Splunk solutions, to correlate and validate against attack origin and data loss prevention rule violations captured by Proofpoint. This information can provide additional valuable security context within Splunk Enterprise and Splunk Enterprise Security (ES) for investigations directed at identifying targeted users, lateral movement and/or exfiltration.


“With advanced attacks overwhelmingly targeting people and not infrastructure, organizations need comprehensive visibility into these threats—within the context of all their other security data,” said Ryan Kalember, senior vice president of Cybersecurity Strategy for Proofpoint. “Proofpoint’s leading visibility into attacks against users, from ransomware to business email compromise phishing, is a perfect fit with Splunk’s capabilities in generating insights from a broad set of security-relevant data sources. The Splunk alliance is a critical part of our strategy to seamlessly integrate with the leading analytics-driven security platform.” 


In addition, this alliance enables Splunk customers to use the Proofpoint Social Media Protection TA for Splunk to add context from Social Patrol to Splunk security solutions. Customers can now send Social Patrol alerts to Splunk software to help with investigations into social phishing links, malware, fraudulent accounts, threats to brand reputation and user privilege modifications.


“At Splunk, we focus on helping our customers move to analytics-driven security,” said Haiyan Song, senior vice president, Security Markets for Splunk. “Proofpoint integrations enable more customers to have enhanced attack visualization across email and social media threat vectors monitored by Proofpoint’s leading email and social media solutions, which helps organizations to respond even faster to incidents from those threat vectors.”


Customers can also now use Proofpoint Emerging Threats TA for Splunk to bring Proofpoint’s Emerging Threats Intelligence feed into Splunk’s security platform. Emerging Threats provides actionable threat intelligence with global context, identifying the source and type of malicious activity on hundreds of thousands of malicious IP addresses and domains, all updated hourly.


For more information on the Proofpoint integrations with the Splunk platform, please click here:


About Proofpoint, Inc.

Proofpoint Inc. (NASDAQ:PFPT) is a leading next-generation security and compliance company that provides cloud-based solutions to protect the way people work today. Proofpoint solutions enable organizations to protect their users from advanced attacks delivered via email, social media and mobile apps, protect the information their users create from advanced attacks and compliance risks, and respond quickly when incidents occur. More information is available at

Connect with Proofpoint: Twitter | LinkedIn | Facebook | YouTube | Google+




Proofpoint, Proofpoint Enterprise Protection, Proofpoint Social Patrol and Proofpoint Emerging Threats are registered trademarks and/or trademarks of Proofpoint, Inc. in the U.S. and/or other countries. The use of the word "partner" or "partnership" does not imply a legal partnership relationship between Proofpoint and any other company.


Splunk is a registered trademark of Splunk Inc. in the United States and other countries. All other trademarks contained herein are the property of their respective owners.