Blumira launches Hearth AI command center for security operations

Blumira Inc. has launched Hearth, a vendor-agnostic AI command centre that lets security teams investigate and act across their existing tools from a single interface. The product is available to organisations that do not use Blumira and is aimed at teams running a patchwork of identity, firewall, endpoint and cloud tools they have no intention of ripping out.

Blumira positions Hearth as an alternative to consolidation. Single-vendor bundles simplify operations but make switching harder, the company argues, so Hearth consolidates the command layer instead of the underlying stack. Hearth reasons across three sources at once: logs Blumira has already parsed for existing customers, the wider set of tools a team runs across identity, firewalls, endpoint detection and response, cloud and raw logs, and the organisation’s public-facing attack surface.

The output is meant to be reusable rather than disposable. Hearth generates schema-validated artefacts, including digital forensics and incident response investigations, compliance evidence with the underlying query attached, and threat hunt playbooks that can be run again in a later quarter or handed to an auditor.

Chief Executive Matt Warner said: ‘Teams have been told to either consolidate their tools or keep the best-in-class solutions they chose. Hearth ends that tradeoff. Hearth reasons across the environment a team already has, and produces resources that outlive any single case and compound security intelligence over time.’

Blumira listed four use cases at launch. The first is a full-scope DFIR investigation that establishes severity, maps activity to MITRE ATT&CK, identifies affected entities and recommends actions in what the company says is minutes rather than hours. Compliance queries work much the same way: ask Hearth where an audit control stands and it goes to live log data for the evidence, then hands back the query it ran to get there. Orchestration runs through the integrations a team already has, which Blumira said takes a separate security orchestration, automation and response tool out of the picture. Hearth surfaces a proposed action, a human approves it, then it executes. The last one targets managed service providers: a single question covers an entire client fleet, so an analyst checking which customers are exposed to a newly disclosed vulnerability does not have to page through dashboards or swap between account views.

Hearth caps an active 12 months for the company. Blumira expanded its endpoint and identity threat detection and response coverage over that period, launched the Kindling auto-triage engine and introduced Blumira Managed, a 24/7 first-response managed detection and response service.

Blumira was founded in 2018. Its backers include Ten Eleven Ventures, Mercury Fund, M25 Group, RPS Ventures and Array Ventures. The company has raised about $28 million, the last of it a $15 million round that closed in June 2023.