AI Governance & Security Vendor Wiki

6 min read

Adlumin (N-able)

Primary category: ai-soc-analysts. Also listed in siem-soc.

One-liner — A cloud SIEM + XDR platform with an optional MDR service, owned by N-able (the RMM / IT-management vendor) since November 2024. You can run it yourself or have N-able’s Adlumin team run it for you. It is aimed at small and mid-sized firms and the MSPs that serve them.

What it does — Adlumin calls itself a “Security Operations as a Service platform” and has two layers:

  • Software: a cloud-native SIEM with “unmetered data ingest” (priced without per-GB metering), plus XDR detection across endpoint, identity (ITDR), UEBA, DNS, threat intel and SOAR automation. A June 2026 N-able release added detection of employees’ “shadow AI” tool use across Adlumin and N-able’s endpoint products.
  • Service: Adlumin MDR, “Experts managing your security toolset”, where Adlumin’s SOC monitors and responds 24/7. Pen testing and incident response are add-ons.

The release says customers can run it “with their own internal team” or have it “fully managed”. So it sits between a SIEM product and a managed SOC, depending on what you buy.

What AI it claims (vendor marketing). N-able describes “Adlumin’s AI-powered XDR platform”, says it uses “proprietary AI to automate 90% of investigation and remediation” (citing N-able’s own 2026 State of the SOC report, methodology not given), and claims “AI-driven detection” that cuts dwell time “from weeks to hours”. The 2024 acquisition release mentioned only “an AI-powered engine with data models that delivers rapid alerts”. That reads like ML-based detection, not agentic investigation. Not independently verified. What the “90%” covers (alert closure? automated playbooks?) is unknown.

Naming / provenance — Adlumin, Inc. was a Washington, DC security-operations company (CEO Robert Johnston at acquisition). Founding year unverified (not checked). It is still sold under the Adlumin name (“Adlumin Security Operations” / “Adlumin SecOps”) on n-able.com, and adlumin.com redirects there. Not to be confused with N-able’s RMM products (N-central, N-sight), which are a different category.

Slug choice — Slugged adlumin (product), not n-able (company). Buyers and the survey respondent shop for and name “Adlumin”. N-able’s core business (RMM, backup) is outside this wiki’s scope. The product brand survived the acquisition. If N-able’s other products are ever added, an n-able page should link here.

Ownership & viability — acquired-closed. N-able, Inc. (NYSE: NABL) acquired Adlumin by merger on 2024-11-20. The release, issued that day, says N-able “has acquired” it. No earlier signed-deal announcement was found, so announced = closed. Terms per the FY2024 10-K: $98.7M cash at close (the release says ~$100M before adjustments), up to 1,570,762 N-able shares, $120M deferred cash paid $52.5M and $67.5M on the first and second anniversaries, and up to $30M earn-out in 2025-26 (fair value $16.6M at acquisition). 131 employees joined N-able. Headline totals of ~$266M in some press combine all of those at face value. This is acquired and invested, not shelved: N-able now sells security operations as one of its three pillars and keeps adding features. The risk for customers is product direction set by an MSP-tooling company, plus N-able’s own ownership. N-able is public, and its PE-sponsor history (Thoma Bravo, Silver Lake) was not re-checked here.

Positioning & differentiators —

  • SIEM + MDR in one, with flat-priced ingest. Compared with splunk or microsoft-sentinel, the pitch is predictable cost and a managed option for firms without a SOC.
  • Run it yourself or have it run for you. Compared with pure MDRs (blackpoint-cyber, esentire), you can operate the platform with your own team and add MDR later.
  • Inside the N-able stack. It pairs with N-central / N-sight RMM, so it is natural for MSPs and IT teams already on N-able. Its closest channel peer is blackpoint-cyber.
  • Not an AI-native SOC. Compared with dropzone-ai or 7ai, the AI is a feature of a SIEM/MDR, not the product.

Who should choose them / anti-fit — Fits a small to mid-sized fund that wants a SIEM for compliance logging and 24/7 managed response from one vendor at predictable cost, especially if its IT provider already uses N-able. Anti-fit: a larger firm standardised on Microsoft E5 / microsoft-sentinel or crowdstrike, or one needing an enterprise SIEM with deep query, long retention and its own detection engineering.

Known weaknesses / gotchas — Survey write-in (2026-10): written into Q46 SIEM/Logging by 1 respondent, in production. Earn-out and deferred payments ran through 2026, so watch for roadmap or packaging changes as integration completes. Log retention periods are not on the SIEM page. AI claims rest on the vendor’s own report.

Deployment & data handling — SaaS (cloud-native SIEM) with collectors / endpoint agent. Logs and telemetry go to Adlumin/N-able’s cloud (data_leaves_tenancy: true). Residency, retention, and training-use terms unverified. Out-of-band.

Integrations & partnerships — Described as vendor-agnostic, integrating with existing stacks. No integration list checked. N-able RMM integration implied by the bundling. MCP support unverified.

Compliance & FS traction — Site lists “Compliance Support” without naming frameworks. Certifications unverified. No named FS customers.

Commercial — Not public. Ingest is unmetered (vendor-stated), suggesting per-user/endpoint or platform pricing. Sold direct to IT teams and through MSPs.

Open questions

  • What the “AI automates 90% of investigation and remediation” claim measures; whether any LLM/agentic investigation exists.
  • SIEM retention periods and data residency; certifications (SOC 2, ISO 27001).
  • Adlumin founding year.
  • Whether N-able plans to retire the Adlumin brand.
  • N-able’s own ownership and any strategic-review/sale activity (not checked).

Sources

History

  • [2026-10-24] Page created and researched. Added because of an Oct-2026 CTO survey write-in under Q46 SIEM/Logging (1 respondent, in production). Slug adlumin (product brand that buyers name) rather than n-able. Primary ai-soc-analysts per the 2026-10 MDR-placement decision; siem-soc cross-list for its cloud SIEM.

Graph View

Backlinks