Query
Query: A focused cloud query engine for investigating security data across connected platforms. Ranked #28 of 28 in Query Engine Software by our editors (6.4/10); pricing: Paid; best for federated security-data investigation.
At a glance
- Editor score6.4 / 10
- PricingPaid
- Best forFederated security-data investigation
- Federated queriesYes
- Facts checked22 Sep 2026
Where it wins
- Searches across connected security sources without centralizing data first
- Normalizes results with FSQL and an OCSF-based data model
- Adds scheduled detections, pipelines, APIs, and AI investigation agents
Where it doesn't
- Its scope is specialized for security operations teams
- Cloud deployment may not suit teams requiring another model
- FSQL is a distinct search language rather than standard SQL
Our verdict on Query
Query is a cloud-based security data mesh and federated search platform for security operations teams. It lets analysts query connected SIEMs, data lakes, endpoint, identity, network, SaaS, and other security platforms without first centralizing the data. FSQL provides a unified search language, while OCSF-based normalization helps align results across sources. The Quick Start plan lists federated security search as its highlighted capability, and the platform is available through the web, REST API, and Chrome extension.
Its strongest fit is an investigation workflow that spans a mixed security stack. Query supports static and dynamic source connectors, query planning, and parallel execution across platforms. Integrations include Splunk, Microsoft Sentinel, AWS Security Lake, CrowdStrike Falcon, Okta, Microsoft Entra ID, Snowflake, Google BigQuery, Databricks, AWS Athena, Azure Log Analytics, ServiceNow, Cribl Search, Google SecOps, and Amazon Redshift. Scheduled federated detections extend the query model into recurring monitoring, while security data pipelines can send information to storage and analytics destinations. The REST API returns JSON and server-sent event responses, and the Chrome extension enables right-click federated searches.
Query also adds AI agents for triage, investigation, hunting, and detection, giving security teams another way to work across distributed sources. Its focus is narrower than a general-purpose query engine: the product is built around security operations, federated investigation, and connected security data rather than broad analytics use cases. Teams with heterogeneous security environments and a need to investigate data in place should consider Query. Organizations seeking a general query engine, a non-cloud deployment, or a standard SQL experience should look for a product aligned with those requirements instead.
Your product? Our editors can test Query in depth and publish a review, labelled as paid · from $149/mo →
Query pricing
All 1 Query plans and prices →
Query fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Federated queries | Yes |
| Heterogeneous sources | Yes |
| Deployment | Cloud |
| SQL support | Not verified |
| Source connectors | 5 |
| Result caching | Not verified |
| Streaming sources | Not verified |
| Deployment | Cloud, Browser extension |
| Platforms | Web, Chrome extension |
| Compliance & security | SOC 2, 2FA |
| Support | Email, Live chat |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 50+ integrations: Splunk, Microsoft Sentinel, AWS Security Lake, CrowdStrike Falcon, Okta, Microsoft Entra ID … See all → |
| Pricing | Paid (source) |
| Website | query.ai |
| Facts checked | 22 Sep 2026 |
Query integrations
Query lists 50+ integrations on its own site — the 20 named here are the ones its pages call out.
- Splunk
- Microsoft Sentinel
- AWS Security Lake
- CrowdStrike Falcon
- Okta
- Microsoft Entra ID
- Snowflake
- Google BigQuery
- Databricks
- AWS Athena
- Azure Log Analytics
- ServiceNow
- Cribl Search
- Google SecOps
- Amazon Redshift
- Amazon OpenSearch
- ClickHouse
- GitHub
- Jamf
- Armis
Alternatives to Query
- Google BigQueryA broad, serverless query engine with flexible pricing and extensive analytics capabilities.9.3
- Databricks SQL WarehouseA flexible SQL warehouse for enterprise lakehouse analytics, BI, and governed data access.9.1
- TrinoA flexible federated SQL engine for querying diverse systems without centralizing data.9.0
Used Query? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Query for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Query is listed in our Query Engine Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/query/"><img src="https://www.itechguides.com/best/badge/query.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update