Tools · siem soar threat intel

Companies using Splunk Enterprise Security_

As of 4 November 2026, 79 companies name Splunk Enterprise Security in their own job postings; it leaves no trace on websites or in DNS.

As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.

Largest market
–
Companies with 51+ staff
–
Top industry
–
Team that names it most
IT operations & business systems · 191 postings
Hiring on it, last 30 days
96 companies
Most often alongside
Splunk · 108 companies
79companies show Splunk Enterprise Security, all sources
0on their website or in DNS records
79name it in their own job postings
257postings naming Splunk Enterprise Security, last 90 days
02 — Two ways we see a tool

Where Splunk Enterprise Security shows up

Each population is counted on its own. We never add them up without saying so, because they answer different questions.

Website and DNS footprint0

Companies whose own pages load Splunk Enterprise Security's scripts or embeds, or whose domain's mail and hosting records (SPF, DKIM, MX, CNAME) point at Splunk Enterprise Security. From our crawl of 41.5M company websites and the DNS sweep behind it. Reach: the tool is in the building.

Job postings79

Companies whose own postings say the team works in Splunk Enterprise Security. Read hourly from ~70 applicant tracking systems, with the function, a quote and a date. Intent: the team that runs it is hiring.

Both0

Companies in the footprint whose postings also name Splunk Enterprise Security. The rest of the posting population (79) runs Splunk Enterprise Security without a public trace on the site or in DNS, which is where job data earns its place.

03 — Who uses it

Companies on Splunk Enterprise Security

Companies with 201+ employees and high-confidence evidence in their own postings; job boards and portals left out.

79 companies show Splunk Enterprise Security; 0 of them have over 1,000 employees.

Filter by country, size, team and source, open verified e-mails for the decision makers, or push new matches to your CRM every week.

Free plan: 1,000 records, no card. The first 20 are above; e-mails are verified at the mail server when you open them.

06 — Job-posting evidence

Who runs Splunk Enterprise Security inside the company

The 79 companies whose postings name Splunk Enterprise Security: by country, size and the function of the role. The second number in the function table is companies.

Postings by function
postings · companies
IT operations & business systems
191 · 122
Software engineering
12 · 9
Sales
10 · 5
Customer service & success
5 · 1
Product, program & project management
5 · 3
Data & AI
1 · 1
Engineering (non-software)
1 · 0
facilities cleaning and security
1 · 1
Posting companies by country
companiesshare
United States
5570%
United Kingdom
45%
Canada
34%
India
34%
Germany
23%
France
23%
Australia
11%
Belgium
11%
Colombia
11%
Czechia
11%
Spain
11%
Poland
11%
Posting companies by size
companiesshare
Self-employed
34%
2-10 employees
45%
11-50 employees
68%
51-200 employees
1215%
201-500 employees
1215%
501-1000 employees
79%
1001-5000 employees
2228%
5001-10000 employees
56%
10,001+ employees
810%
Hiring on it right now
postings
Postings, last 30 days
188
Postings, last 90 days
257
All open postings
309

96 companies opened a role that names Splunk Enterprise Security in the last 30 days. A hiring team that names its tools is the moment to write to the person who owns the stack.

07 — Named alongside

What Splunk Enterprise Security teams also ask for

Tools named in the same postings as Splunk Enterprise Security. Office software is left out.

08 — siem soar threat intel

Splunk Enterprise Security against the rest of its category

Ranked by companies naming each tool in postings. Whole category →

Cite this

Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.

79 companies name Splunk Enterprise Security in their own job postings; it leaves no trace on websites or in DNS, so the posting layer is the whole picture. (Breaknorm, 4 November 2026, https://breaknorm.co/tools/splunk-enterprise-security)
How we know

Read from the source, not self-reported

Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →

  • Website codeScripts, tags and embeds found on the company's own pages in our crawl of 41.5M sites. A tool counts once per company.
  • DNS recordsSPF includes, DKIM selectors, MX and CNAME records of the company's domain that point at Splunk Enterprise Security or another vendor. Swept in cycles; dedicated mail-provider and hosting facets open once coverage passes 80% per country.
  • Job postingsRead hourly from the applicant tracking systems behind company career sites. A tool counts when the employer's own text names it as the team's system; candidate wish-lists and apply boilerplate are excluded. Confidence low, medium or high per company.
  • Sending infrastructureCold-e-mail sending domains are look-alike domains on a provider's infrastructure (DNS records, certificate logs) that redirect to the company. Absence is not evidence: only companies with a found sending domain are counted.
  • CompaniesCountry, size and industry come from the company profile we build from its website; headcount from LinkedIn where known, otherwise estimated. Job boards, portals and aggregators are kept out of lists.
FAQ

Splunk Enterprise Security data: questions

How many companies use Splunk Enterprise Security?

79 as of 4 November 2026: 0 carry Splunk Enterprise Security on their website or in their DNS records and 79 name it in their own job postings; 0 show up in both. We keep the two counts apart because they measure different things.

What does "website or DNS" mean?

Our crawler finds Splunk Enterprise Security's scripts, embeds and tags on the company's own pages, and our DNS sweep reads the domain's mail and hosting records (SPF includes, DKIM selectors, MX, CNAMEs) that point at Splunk Enterprise Security. Either one puts the company in the footprint. The sweep is still running, so this number grows week by week.

Why is the job-posting number so much smaller?

A posting only names a tool when the team that will use it is hiring and chooses to say so. That makes it a smaller but stronger signal: it tells you which team runs Splunk Enterprise Security, with a quote and a date. The footprint tells you reach.

How fresh is this?

Career sites are read hourly, websites are re-crawled on a rolling schedule and DNS is re-swept in cycles. The date at the top is when these counts were computed.

Can I get the list?

Yes. The first 20 are on this page; the full 79 with verified e-mails and a weekly feed of new Splunk Enterprise Security users is in the product. Counting is free.

Companies and people

Get this list your way

The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.

Every company on Splunk Enterprise Security,
with the person who owns it

Connect the MCP server or the API, filter on Splunk Enterprise Security, and get 1,000 records free.

  1. 01Sign up, no card
  2. 02Connect Claude, ChatGPT or an API key
  3. 03Ask for your market, 1,000 records free