Packaging change·Dec 29 → Mar 30, 2026·Q1 2026·Cloud & DevOps
Datadog Cloud SIEM Doubles Detection Rules to 800, Adds AI-Powered Investigations
What changed
Feature added
New Cloud SIEM capabilities added: SQL-based detections on OCSF datasets, UEBA, Risk-based insights with notifications, AI-powered investigation (verdicts, notebooks), Threat Intelligence with Recorded Future and IoC Explorer.
Limit increase
Out-of-the-box detection rules count more than doubled from 350 to 800, reflecting expanded threat coverage maintained by Datadog's detection engineering team.
Before and after
Dec 29, 2025 vs Mar 30, 2026Pulse.
100%
Change 1 of 2 · feature added
New Cloud SIEM capabilities added: SQL-based detections on OCSF datasets, UEBA, Risk-based insights with notifications, AI-powered investigation (verdicts, notebooks), Threat Intelligence with Recorded Future and IoC Explorer.
Sign in to view the full comparison
See the before/after screenshots and every marked-up change.
More from Datadog
Full history →- Week 41, 2026·improvedDatadog Cloud Siem makes workflows free when triggered by security findings
- Week 31, 2026·packagingDatadog Cloud Siem: free investigation allotment metric changed to per-TB
- Week 27, 2026·packagingDatadog Cloud Siem cuts Cloud SIEM data retention from 15 to 12 months
- Q2 2026·improvedDatadog Cloud Siem: billing switched to per-GB, retention cut to 12 months
- Week 17, 2026·improvedDatadog Cloud Siem guarantees 50 free monthly Bits AI investigations minimum