Cribl Acquires Tero to Build AI-Native Observability

Production knowledge has a maintenance cost, even when nobody puts it on the observability invoice. Cribl is acquiring more of the expertise behind that work through its November 10, 2026 acquisition of Tero, an intelligence layer for telemetry data. The combination connects a team working on production context with a platform already responsible for moving and managing enterprise telemetry.

The acquisition announcement names Tero co-founders Ben Johnson, Adam Cohen and Nihar Singhal as joining with their engineers. Johnson, previously Tero's CEO, becomes Cribl's VP of Observability. The price was not disclosed, and Cribl has not supplied a delivery calendar for the host monitoring, application performance monitoring, federated observability and AI-native observability work the team will help lead.

The strategic question reaches beyond adding another monitoring product. As engineers ask AI agents to participate in production work, the explanation of how an environment behaves has to become something those agents can use. Cribl is assembling more of the capabilities needed to sell that shared understanding alongside the telemetry infrastructure it already provides.

What Cribl is buying with Tero

Tero's product connects read-only to data held in existing telemetry stores. Its Index maintains a model of the environment; Issues surfaces problems with evidence; Actions routes work toward policies, workflows or agents; Query helps investigate the underlying records. The company describes applications spanning wasted telemetry, sensitive data and reliability risks. These are product descriptions, rather than independently established performance results.

That architecture gives the acquisition a practical center. An investigation becomes more useful when a finding arrives with the relevant service, owner and supporting records attached. Otherwise, the customer may have paid to preserve the evidence while still depending on someone to explain where to begin. The value of the software sits partly in how much of that orientation it can carry into the next task.

There is also a boundary worth keeping clear for buyers. Tero's current product pages show what the company has been building, while the acquisition release describes Cribl's direction. A customer evaluating the combination should distinguish today's available functionality from future integration. Neither company has published detailed standalone-product transition terms in the materials reviewed for this article.

A founder's second observability transaction

Ben Johnson has traveled this part of infrastructure before. Datadog acquired Timber Technologies in February 2021, bringing in the developers of the open-source Vector pipeline. Johnson was Timber's co-founder and CTO. Vector addressed collection, transformation and routing, giving engineering teams more control over where their observability data went.

Tero attracted support for work further along that path. In a January 14, 2026 investment account, NextView Ventures' David Beisel described a $2.6M Seed backed by NextView and Founder Collective. Tero's own team page also lists Ritual Capital among its backers. The earlier financing establishes part of the company's history; without an acquisition price or ownership details, it cannot establish an investor return.

The people joining include Tero CTO Adam Cohen and COO Nihar Singhal. Cribl's existing leadership includes CEO Clint Sharp and CTO Ledion Bitincka, with Dritan Bitincka leading product as CPO. That combination puts the incoming team's work beside executives already responsible for turning telemetry capabilities into an enterprise product portfolio. How the capabilities fit together will matter to customers long after the deal announcement.

Why reusable context matters to enterprise buyers

Cribl has described its architectural preference in Clint Sharp's account of agentic telemetry: a modular environment in which customers can combine capabilities and retain choice over where data lives. That is an ambitious commercial position for a company expanding its own observability applications. The buyer is being offered both more first-party functionality and continued freedom to use other suppliers.

For an engineering organization, portability includes more than the ability to export records. A team also invests time in understanding service relationships, interpreting changes and establishing which evidence deserves attention. Rebuilding that understanding whenever a tool changes adds work to the purchase decision. A shared foundation could make that investment useful across more applications, although the acquisition alone cannot establish the quality of the eventual implementation.

Tero's agent-native observability description emphasizes preparing context before an investigation starts and giving agents access to the relevant evidence. The distinction is operational: an agent starting with a documented issue has a different assignment from one asked to discover the environment from raw records. Buyers can examine how those assignments are prepared, how ownership is represented and how a finding leads back to its source.

Cribl's platform expansion carries a customer obligation

The Tero deal follows Cribl's July acquisition of CardinalOps and its August acquisition of Radiant Security's AI SOC technology. Together, those transactions show Cribl extending its telemetry foundation into more security and observability work. The incoming expertise makes the product ambition easier to understand, while leaving customers to evaluate each delivered capability on its own merits.

Cribl has an established business from which to attempt that expansion. In a February 11, 2026 release, the company reported exceeding $300M in annual recurring revenue in 2025. Its company overview currently lists more than 1,400 customers and adoption by half the Fortune 100. Those are company-reported figures, and they describe Cribl rather than Tero's undisclosed customer or revenue base.

In his account of joining Cribl, Johnson describes reaching out after recognizing a shared direction. The appeal of combining forces is visible in the work ahead: Tero's understanding of telemetry can be developed within a platform already serving enterprise buyers. Those buyers still need an engineer and an agent to follow the same evidence through an investigation, with the service relationships and reasons for a decision intact when the work reaches the next person.