Free tools Windows power users keep installed
One-click scans. No signup required.
AWS acquired cybersecurity startup Sqrrl in January 2018, bringing its threat-hunting technology and team into Amazon Web Services. The purchase price was not disclosed. A reported estimate of about $40 million came from Axios, but AWS did not confirm that figure.
Sqrrl gave AWS security analytics designed to correlate data from multiple sources, identify suspicious patterns, and help analysts investigate advanced threats. Its founders’ and employees’ backgrounds in the National Security Agency and the broader intelligence community also made the company relevant to AWS’s push into sensitive government workloads.
As an Amazon Associate I earn from qualifying purchases.
The acquisition was confirmed in January 2018
The transaction followed several weeks of public reporting. On December 17, 2017, Axios reported that Amazon was in talks to acquire Sqrrl. Sqrrl CEO Mark Terenzoni announced the completed acquisition on January 23, 2018, and technology and cybersecurity publications reported it publicly on January 24.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchThis was an acquisition—not a partnership or minority investment. Sqrrl said it had been acquired by Amazon and would join the AWS organization.
#1 Best Overall
What Sqrrl built
Founded in 2012 and headquartered in Cambridge, Massachusetts, Sqrrl developed security analytics and threat-hunting software. Its technology was intended to help security teams:
- Collect and analyze information from multiple security and operational data sources.
- Identify patterns associated with suspicious or advanced activity.
- Alert analysts to potential threats.
- Investigate relationships among events, users, systems, and vulnerabilities.
- Visualize complex activity during threat hunts and incident investigations.
That positioned Sqrrl closer to a threat-investigation and analytics platform than to traditional endpoint antivirus. The software could help analysts understand what was happening across an environment, but organizations would still need telemetry, identity controls, response processes, and skilled security personnel.
Why Sqrrl was strategically attractive to AWS
The acquisition made sense for AWS for three connected reasons.
Security analytics for cloud customers
AWS was expanding beyond infrastructure to offer more security capabilities around cloud workloads. Sqrrl’s focus on correlating large volumes of data and assisting human threat hunters could complement that strategy.
Specialized security talent
AWS could acquire not only a working product but also engineers and security leaders with experience building tools for difficult intelligence and cybersecurity problems. Buying an established team can be faster than developing comparable expertise internally.
Relevance to government workloads
Several Sqrrl personnel had NSA or intelligence-community backgrounds. That did not make Sqrrl an NSA company, nor does it prove that the acquisition was made for a particular government contract. However, the background was strategically relevant as AWS pursued highly sensitive public-sector customers.
AWS had announced its AWS Secret Region in November 2017 for U.S. government workloads requiring the Secret classification level. Sqrrl’s experience in the intelligence community fit that broader government-security context, even though the acquisition did not automatically create a new authorization or establish a specific contract win.
Recommended Free Tools
How much did AWS pay for Sqrrl?
The official purchase price was not disclosed. Contemporary reporting attributed an estimated value of approximately $40 million to Axios, but AWS did not confirm it.
Rank #3
Sqrrl had reportedly raised about $26.5 million in venture funding. That figure describes capital invested in the startup; it is not the same as the company’s acquisition price or valuation.
The safest summary is: AWS acquired Sqrrl, but the financial terms were undisclosed; about $40 million was an unconfirmed reported estimate.
What happened to Sqrrl customers?
Sqrrl’s announcement indicated that, initially, it would be “business as usual.” The company said it would continue working with existing customers while collaborating with AWS. That provided a short-term assurance, but it was not a detailed long-term product or support policy.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsThe available acquisition coverage does not establish:
- How long standalone support continued.
- Whether existing contracts or renewals were transferred to AWS.
- Whether customers were migrated to a named AWS service.
- When the original Sqrrl product reached—or would reach—end of life.
- What data-export or portability options customers received.
For buyers, those unanswered questions are a normal acquisition risk. A customer evaluating a similar situation would want written confirmation about support duration, contract continuity, renewal terms, data retention, export formats, replacement products, and incident-response obligations.
Did Sqrrl become an AWS security product?
Public evidence confirms that Sqrrl personnel joined AWS, but it does not document a simple one-to-one transition into a currently branded standalone AWS service.
An AWS presentation later identified Ely Kahn as a Sqrrl co-founder and described Sqrrl as acquired by AWS in January 2018. That supports team integration. It does not prove that the original Sqrrl product remained commercially available or that all of its technology became part of GuardDuty, Detective, Security Hub, or another named service.
Amazon’s later public filings describe AWS’s broad security, analytics, and machine-learning businesses without identifying Sqrrl as a material standalone product line. Therefore, readers should not assume that every current AWS security capability originated with Sqrrl, or that AWS still sells a product under the Sqrrl name.
Best Value
What the deal did—and did not—prove
| What the acquisition supports | What it does not establish |
|---|---|
| AWS considered security analytics and threat hunting strategically important. | A confirmed $40 million purchase price. |
| AWS gained Sqrrl’s team and threat-investigation technology. | A specific integration into GuardDuty, Detective, or Security Hub. |
| Sqrrl’s intelligence-community background was relevant to AWS’s government strategy. | That Sqrrl was owned by the NSA or acquired for a particular government contract. |
| Existing customers were initially told that operations would continue. | A published long-term migration, renewal, or end-of-life plan. |
What AWS customers should evaluate today
If you are researching Sqrrl because you need threat hunting now, do not assume that a current standalone Sqrrl product is available. Evaluate current services by capability rather than by acquisition history:
- Amazon GuardDuty for AWS-native threat detection.
- Amazon Detective for investigation and relationship analysis around security findings.
- AWS Security Hub for centralizing and prioritizing findings.
- Amazon OpenSearch Service for search, dashboards, and security-log analytics when the organization can manage ingestion and tuning.
Depending on the environment, buyers may also compare full security operations platforms such as Splunk Enterprise Security, Microsoft Sentinel, or Google Security Operations. Endpoint-focused platforms such as CrowdStrike Falcon may complement these tools but do not automatically replace cloud-native analytics or a SIEM.
The right choice depends on data coverage, multi-cloud requirements, log retention, query and storage costs, response automation, managed detection needs, internal threat-hunting expertise, and the risk of becoming dependent on one cloud ecosystem. Current prices and usage limits should be checked on each vendor’s official pricing pages before purchase.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
