Matano GTM brain

category

market profile

• text: Security teams face rising log volumes and SIEM retention costs across cloud, network and SaaS sources.
• text: Open data formats and detections as code appeal to teams that want portability and engineering control.

personas

• title: Head of security operations
  pains:

  • SIEM ingestion costs force tradeoffs over which logs to retain
  • Analysts need correlated context to investigate threats
• title: Detection engineer
  pains:

  • Query-only detection rules are difficult to test and review
  • Noisy alerts and inconsistent schemas slow investigations
• title: Cloud security architect
  pains:

  • Proprietary security data formats create lock-in
  • Operating a custom data lake consumes engineering capacity

icp

• text: Cloud-first organizations running substantial security workloads on AWS, with teams able to deploy into their own account.
• text: Organizations retaining significant volumes of security logs across cloud, network and SaaS environments; especially those with detection engineering expertise.

message pillars

• text: Bring structured security logs into the customer's AWS account.
• text: Build version-controlled detections in a familiar programming language.
• text: Keep the data portable through an open format.

objections

• objection: Moving off an established SIEM is risky.
  response: Evaluate it first as a security data lake alongside the existing SIEM, then compare coverage and operational burden.
• objection: Running open source means more work for our team.
  response: The project is serverless and the repository also describes a commercial managed offering; validate service coverage directly.

competitors

• name: Splunk
  why: Established SIEM named as an alternative in the founder launch.
• name: Elastic Security
  why: Security analytics and SIEM stack named in the product repository.

keywords

• AWS SIEM alternative
• security data lake
• open source SIEM
• detection as code Python
• Splunk alternative
• security log retention

voice

• Technical and practitioner-oriented
• Direct about cost and operational overhead
• Open-source and ownership focused

signals

• text: Security team is reviewing SIEM ingestion bills or limiting log retention.
• text: Hiring detection engineers with Python and AWS experience or building a security data lake.

stack

• AWS
• Amazon S3
• AWS Lambda
• Apache Iceberg
• Python
• Rust

pricing

motion

channels

• GitHub
• Discord
• developer community
• YC launch

confidence

Founders

• name: Samrose Ahmed
  title: Founder
  role: Founder
  bio: Hi I'm Samrose, a software engineer by background. I grew up in NYC, went to CMU, and worked at AWS for a few years before starting Matano. I'm especially interested in big data, cloud, and highly available systems. Outside of work, I'm an avid reader.
• name: Shaeq Ahmed
  title: Founder
  role: Founder
  bio: Hey! Shaeq is a software engineer who originally hails from New York and loves all things open source, security and big data. He quit his job crunching data for autonomous robots at Amazon to build Matano - an open-source SIEM alternative for security teams on AWS.