Revenue
Sacra estimates that Dataminr hit $225M in annual recurring revenue (ARR) in July 2026, up from $205M at the end of 2025.
Dataminr grew from approximately $190M in ARR at the end of 2024 to $205M at the end of 2025, then accelerated through the first half of 2026 with what the company described as its largest quarter of organic net ARR additions in more than five years. International defense has been a particularly strong growth driver, with ARR from that segment growing more than 180% year-over-year.
Dataminr sells enterprise SaaS subscriptions to corporations, governments, militaries, and news organizations. Its AI platform analyzes large volumes of publicly available data to detect emerging events, threats, and risks, delivering real-time alerts through products including Dataminr Pulse for corporate security and cyber risk, First Alert for governments and public-sector organizations, and Dataminr for News for journalists and newsrooms. Contracts are generally annual or multi-year enterprise licenses rather than usage-based. Government and defense deals can be particularly large: Dataminr's U.S. Department of War First Alert contract is worth $318M over roughly five years, illustrating how a single enterprise deployment can represent tens of millions of dollars of annual contract value.
Valuation & Funding
Dataminr last disclosed a priced valuation in its June 2021 Series F, which raised $475M at a $4.1B post-money valuation and a $44 per-share price. Investors included Eldridge, Valor Equity Partners, MSD Capital, Reinvent Capital, ArrowMark Partners, IVP, and Eden Global.
Earlier priced rounds include a 2018 Series E that raised $392M at a $1.6B valuation, with participation from Fidelity Investments, Goldman Sachs, HSBC, and others, and a 2015 Series D that raised $130M at a $700M valuation.
In 2025, Dataminr raised $485M across three growth financings: an $85M round of convertible financing and credit that closed in March 2025, a $100M convertible investment from Fortress Investment Group in April 2025, and a $300M financing led by Fortress and NightDragon in September 2025. The September round was announced alongside Dataminr's intent to acquire ThreatConnect at a $290M transaction value.
Total disclosed funding is at least $1.53B.
Product
Dataminr is a real-time event-detection and intelligence platform that continuously ingests public data from more than one million sources across 150-plus languages and in text, image, video, and audio formats. Sources include social media, news sites, government advisories, emergency communications, hacker forums, deep- and dark-web content, code repositories, and sensor feeds. The platform processes over 43 terabytes per day and identifies nearly 500,000 potential events, threats, and risks daily before filtering and personalizing them for each customer.
The product fuses fragmented public signals, such as social posts mentioning smoke, a flight-tracking anomaly, and an emergency-services dispatch, into a single event object using multimodal AI models. It classifies the event type, estimates its location and severity, matches it against the customer's watchlists, facilities, personnel, or mission areas, and sends an alert through web, mobile, email, API, or integrations including Slack, Microsoft Teams, Esri ArcGIS, Splunk, and Palantir Foundry.
Dataminr's agentic layer includes Intel Agents, which search for corroborating sources, retrieve historical precedents, and assemble a preliminary briefing. ReGenAI maintains a live summary that updates as new information arrives, allowing users to follow one evolving event object rather than a chronological feed. A predictive layer compares the current event with more than a decade of archived event patterns to identify plausible near-term developments.
The platform has four vertical products. Dataminr Pulse serves corporate security teams monitoring employees, facilities, supply chains, and executives. First Alert Advanced, launched August 26, 2026, serves governments, militaries, and public agencies with agentic corroboration, tailored live briefs, tactical predictive intelligence, and advanced APIs. Dataminr for Cyber Defense, built on the acquired ThreatConnect platform, combines external threat signals with a customer's internal asset inventory, vulnerabilities, and security controls to prioritize exposures and automate intelligence workflows across more than 200 integrations. Dataminr for News provides journalists and editors with alerts on breaking stories and access to underlying source material before conventional reporting.
Business Model
Dataminr sells annual and multi-year enterprise subscriptions, generally priced per user or deployment. Contract values scale with seat count, geographic scope, product tier, API access, and integration requirements. Public-sector procurement examples price individual First Alert licenses at $6,000–$10,000 per user annually for smaller government deployments, while enterprise-wide arrangements include the $318M military contract.
The business uses one global detection platform across multiple vertical products. Dataminr incurs the cost of ingesting and analyzing 43-plus terabytes of public data once, then packages the resulting intelligence for military watch centers, corporate security operations centers, cyber-defense teams, and newsrooms. The marginal cost of serving another customer on the same infrastructure is lower than the cost of building the platform, though continuous real-time multimodal AI inference, data licensing, multilingual model training, and enterprise sales make the cost structure heavier than typical workflow SaaS.
Customers can start with alerting for a small security team, then add users, locations, APIs, executive-protection workflows, and cyber-defense modules. The ThreatConnect acquisition adds cross-selling opportunities from external event detection into internal threat-intelligence management, exposure prioritization, and financial risk quantification. The 2026 Global Partner Network, which spans more than 100 partners including AWS, Carahsoft, WWT, TD SYNNEX, Arrow Electronics, and Crisis24, distributes Dataminr through managed security services, government resellers, and regional channels that would be more expensive to serve through direct sales alone.
More detections generate more historical event data for model training, classification, and predictive accuracy. Customer configurations and feedback then refine relevance filtering. The proprietary asset is the accumulated mapping between early signals and the real-world events they eventually represented, rather than the raw public data, which competitors can also access.
Competition
Dataminr operates at the intersection of real-time event detection, corporate risk intelligence, government OSINT, and cyber threat intelligence. Its core differentiator is detection speed, identifying meaningful events from precursor signals before conventional news or official channels publish, but competitors are bundling faster AI-driven detection into broader platforms that also own downstream response workflows.
OSINT and investigative intelligence
Babel Street is Dataminr's most direct competitor in government and national-security OSINT. It combines public and commercially available information with entity resolution, social-network analysis, managed attribution, dark-web monitoring, and mobile telemetry across 200-plus languages. Babel Street focuses on investigative profiling and analyst-initiated research rather than unsolicited real-time alerting, but its 2026 push into agentic risk intelligence, with governed agents that perform research, discover entities, and generate citation-backed reports, brings it closer to Dataminr's territory.
In a prior Air Force procurement, the government chose Dataminr over Babel Street partly because of Dataminr's broad access to the X firehose and its ability to use current and historical data for alert accuracy. That decision shows how data rights and guaranteed source continuity can outweigh price in mission-critical procurement. Babel Street is a greater threat in regions where X and mainstream Western news provide incomplete coverage and localized data partnerships matter more.
Critical-event management and response platforms
AlertMedia and Everbridge compete by bundling risk intelligence with mass notification, employee safety, incident orchestration, and business-continuity workflows. AlertMedia's 2026 Real-Time Signals capability targets hyperlocal early warnings, while Everbridge 360 connects risk intelligence with physical security, video management, and national public-warning infrastructure.
These platforms create pricing pressure because buyers may accept slightly later or narrower detection in exchange for replacing separate intelligence, notification, and travel-risk products with a single vendor. Everbridge's documentation indicates that it aims to publish risk events roughly one hour after an incident begins due to confirmation requirements, leaving Dataminr as the earlier-signal layer. Suite consolidation remains a threat when procurement teams value simplicity over minutes of lead time.
Samdesk and Factal compete more narrowly on corporate-security event detection. Samdesk focuses on decision clarity and human verification for mid-market buyers that find Dataminr too broad or expensive. Factal combines AI discovery with a 24/7 newsroom of experienced journalists, targeting organizations that prioritize editorial trust over purely algorithmic speed.
Cyber threat intelligence
Recorded Future, now owned by Mastercard for $2.65B, is Dataminr's largest cyber-intelligence competitor. Its Intelligence Graph connects external sources, dark-web data, and technical feeds across more than one million sources with over 100 native integrations. Mastercard's distribution, payment-fraud signals, and enterprise relationships give Recorded Future access to channels that standalone cyber vendors lack.
Dataminr's acquisition of ThreatConnect is partly defensive against this threat. ThreatConnect supplies internal intelligence management, asset context, exposure prioritization, and response orchestration, allowing Dataminr to assess both what is happening externally and whether it matters to a specific customer's environment. The competitive question is whether cyber teams prefer an intelligence graph centered on adversaries and technical telemetry or a real-time event platform centered on early public signals and cross-domain risk.
ZeroFox overlaps in digital-risk monitoring. Signal AI competes for enterprise-risk, communications, and reputation budgets with quantified risk matrices, trend analysis, and peer benchmarking aimed at board-level reporting use cases that Dataminr's agentic products are beginning to target.
Defense decision platforms
Palantir, Anduril, and Scale AI compete for the same defense and intelligence budgets. Palantir's AIP for Defense can combine commercial models with internal mission data across classified systems and tactical-edge environments, treating Dataminr-like alerts as one data source within a broader operational ontology. Dataminr's new Palantir Foundry application and $318M military contract make integration more likely than displacement in the near term, but the platform controlling mission workflows will have greater pricing and renewal leverage over time.
BlackSky and other satellite-intelligence providers offer proprietary geospatial confirmation that Dataminr's asset-light public-data approach cannot replicate. As these providers add automated anomaly detection and event alerts, they compete more directly with Dataminr in use cases where physical confirmation matters more than social or media discovery.
TAM Expansion
Dataminr's expansion strategy centers on applying a single global detection engine to deeper intelligence products, broader customer segments, and new geographic markets.
From alerts to autonomous intelligence
First Alert Advanced, launched August 26, 2026, extends the product from event notification into agentic corroboration, with continuously updated tailored briefs, contextual research, tactical predictions, and automated brief creation. These capabilities address functions traditionally performed by separate software, intelligence feeds, and human analysts, expanding Dataminr's addressable spend per customer from alerting budgets to analysis, reporting, forecasting, and operational decision support.
Dataminr could apply the same autonomous capabilities to corporate security by automatically assessing which facilities, executives, employees, suppliers, or operations are affected by an event, generating situation reports, and recommending escalation workflows. This could increase contract values across an installed base of more than 550 global security teams protecting 14 million employees and 1.1 million client facilities.
Cybersecurity and exposure management
The ThreatConnect acquisition extends Dataminr from external threat discovery into the broader cyber-defense stack. Dataminr for Cyber Defense comprises three products: Client-Tailored Threat Intelligence filters external signals through a customer's technology environment; Agentic TI Ops automates investigation and distribution across internal and external intelligence; and Predictive Threat Exposure Management connects live threats with vulnerabilities, security controls, and quantified financial exposure.
Dataminr can cross-sell ThreatConnect capabilities to its corporate and government customers, sell its real-time signal layer to ThreatConnect's 250 customers, including one-third of the Fortune 50, and expand contracts as customers adopt investigation automation and continuous exposure management. The TD SYNNEX distribution agreement gives the cyber portfolio access to more than 35,000 North American resellers.
International defense and partner-led distribution
First Alert is used by 18 national militaries, including 15 NATO members, while NATO and nine international militaries were pre-launch customers for First Alert Advanced. The $318M U.S. military contract could serve as a reference deployment for allied militaries and intelligence organizations as geopolitical volatility, cyber-physical threats, and contested logistics increase demand for real-time public-information intelligence.
The 2026 Global Partner Network spans solution providers, government resellers, managed security service providers, technology alliances, and distributors such as Arrow Electronics across EMEA. These channels provide access to mid-market enterprises, regional governments, universities, healthcare systems, and utilities that would be costly to acquire through direct enterprise sales. The Platform API can embed Dataminr's intelligence in insurance, logistics, travel, financial-market, and geospatial products, reducing its dependence on named-user seats.
Risks
Government concentration: The $318M Department of War contract represents roughly 25% of modeled 2026 revenue on an annualized basis, and large government awards contain options, funding contingencies, and annual appropriation dependencies that can cause realized economics to differ materially from headline contract ceilings, while exposing Dataminr to political changes, procurement protests, audits, and shifting rules governing public-data surveillance.
Source-access dependency: Dataminr's detection advantage depends on sustained, lawful, and economically viable access to public platforms and data streams, while major sources such as X, Meta, Telegram, and regional social networks can restrict APIs, raise licensing prices, prohibit government use, or change content visibility with little notice, potentially degrading coverage and allowing competitors with proprietary sensor, satellite, or rights-cleared datasets to differentiate.
AI commoditization and alert fatigue: General-purpose foundation models make summarization, translation, and basic OSINT assembly cheaper, allowing large defense agencies, banks, and technology companies to build internal monitoring agents that are adequate for narrow use cases at lower marginal cost, while Dataminr's expansion into agentic predictions and autonomous workflows increases the consequences of false positives, manipulated source material, or confidently generated but incorrect context in high-stakes military, cyber, and employee-safety decisions.
News
DISCLAIMERS
This report is for information purposes only and is not to be used or considered as an offer or the solicitation of an offer to sell or to buy or subscribe for securities or other financial instruments. Nothing in this report constitutes investment, legal, accounting or tax advice or a representation that any investment or strategy is suitable or appropriate to your individual circumstances or otherwise constitutes a personal trade recommendation to you.
This research report has been prepared solely by Sacra and should not be considered a product of any person or entity that makes such report available, if any.
Information and opinions presented in the sections of the report were obtained or derived from sources Sacra believes are reliable, but Sacra makes no representation as to their accuracy or completeness. Past performance should not be taken as an indication or guarantee of future performance, and no representation or warranty, express or implied, is made regarding future performance. Information, opinions and estimates contained in this report reflect a determination at its original date of publication by Sacra and are subject to change without notice.
Sacra accepts no liability for loss arising from the use of the material presented in this report, except that this exclusion of liability does not apply to the extent that liability arises under specific statutes or regulations applicable to Sacra. Sacra may have issued, and may in the future issue, other reports that are inconsistent with, and reach different conclusions from, the information presented in this report. Those reports reflect different assumptions, views and analytical methods of the analysts who prepared them and Sacra is under no obligation to ensure that such other reports are brought to the attention of any recipient of this report.
All rights reserved. All material presented in this report, unless specifically indicated otherwise is under copyright to Sacra. Sacra reserves any and all intellectual property rights in the report. All trademarks, service marks and logos used in this report are trademarks or service marks or registered trademarks or service marks of Sacra. Any modification, copying, displaying, distributing, transmitting, publishing, licensing, creating derivative works from, or selling any report is strictly prohibited. None of the material, nor its content, nor any copy of it, may be altered in any way, transmitted to, copied or distributed to any other party, without the prior express written permission of Sacra. Any unauthorized duplication, redistribution or disclosure of this report will result in prosecution.