7AI Partner Program
Lakewatch gives your security data a home. 7AI puts it to work.
Through a certified connector, 7AI agents query Databricks in place with Unity Catalog-governed access, using your lakehouse data as context to investigate alerts from across your security stack.
How it works
7AI puts your Databricks data to work, inside your governance boundary
When an alert comes in, 7AI agents decide which evidence the investigation needs and query your Databricks SQL Warehouse for it directly. 7AI connects as a service principal you create, with read access limited to the Unity Catalog tables you grant. Results come back to the investigation, your data stays in your lakehouse, and every query shows up in your own Databricks audit logs. That same data supports every stage, from detection with 7AI Federated SIEM to investigation and hunting with Federated Search.
Access
Read-only SQL
Agents run read-only queries on your Databricks SQL Warehouse.
AUTH
OAuth 2.0 service principal
7AI connects as a service principal you create.
Governance
Unity Catalog SELECT grants
Access is limited to the tables you grant.
Data
Stays in your lakehouse
Evidence is queried where it lives.
Use Cases
Fast, thorough security operations on the tools you already own
Run 7AI yourself with a dedicated AI Security Engineer, entrust it to 7AI's managed services team, or both. Same platform and controls either way.
| Use case | With 7AI | On Databricks |
|---|---|---|
| DetectionDetection on data where it lives | 7AI Federated SIEM runs detection across your sources, and alerts go straight to 7AI agents. | Data stays in Lakewatch, your existing SIEM, or both, and moves on your timeline |
| InvestigationInvestigations that hold up to scrutiny | Agents investigate alerts across identity, endpoint, email, and cloud. Every finding traces back to its query and source, and anything uncertain goes to a practitioner. | Lakehouse telemetry queried in place as investigation context, through Unity Catalog-governed access |
| ResponseFrom verdict to action | Findings and recommendations lead to approval-gated response actions. | Every recommended action is backed by evidence from your lakehouse, with read-only access to Databricks |
| HuntingQuestions answered across all your data | Proactive hunts in plain language, with 7AI building and running the queries. | Hunts query Databricks in place alongside every other connected source |
Better Together
A security outcome on top of your lakehouse
Security teams are bringing more of their security data to Databricks, and Lakewatch gives it an open, governed home. 7AI puts that data to work at every stage, from detection and investigation to response and hunting. Queries run governed on your own SQL Warehouse, and anything uncertain goes to your practitioners.