Community Blog
Get the latest updates on the Splunk Community, including member experiences, product education, events, and more!

Developer Spotlight with Qmulos

vvalverde
Splunk Employee
Splunk Employee

Qmulos: Building a Next-Level Cybersecurity Business through Splunk Apps 

Qmulos-Logo.png

Qmulos started as a scrappy startup with a bold vision: to revolutionize cybersecurity compliance and user behavior analytics. Today, the company has grown into a powerhouse, blending the talents of engineers with diverse backgrounds ranging from finance and gaming to large-scale cybersecurity. At the core of their success is a passionate team pushing the boundaries of Splunk app development, delivering cutting-edge solutions like their flagship Q-Compliance app.

These advancements supercharge Qmulos’ business and usage metrics when paired with Splunk. Some of these impressive figures include: 

  • Over 2500 systems, applications, and programs (i.e., accreditation boundaries) managed for compliance; 
  • More than 120 TB of technical compliance evidence automatically collected via Splunk; 
  • Over 700K security controls monitored and assessed; and 
  • Support for more than 20 security and compliance frameworks. 

These metrics highlight the extensive scale and automation capabilities Qmulos provides in managing compliance and security posture through Splunk integration. Join us as we spotlight the dynamic people, innovative technologies, and unique culture that fuel Qmulos’ ongoing mission to secure both public and private sector IT environments.

Qmulos Scales Up by building a High-Impact Cybersecurity Team

The Qmulos team ranges in experience from earlier career engineers to veterans in the industry, ranging from a couple years of experience to decades. As a company, it started as a small scrappy start-up and has grown into an organization with multiple teams focused on delivering mission-critical cybersecurity compliance and user behavior analytics solutions for public and private sector customers.

From Finance to Gaming: Qmulos Innovates

Qmulos team has a diverse, if not somewhat unconventional history. While most team members had adjacent cybersecurity experience by virtue of developing software in large engineering teams, they have team members who came from backgrounds in financial institution solutions, supply-chain management, and even game and hardware development.

Qmulos: Engineering the Future of Splunk Apps

Qmulos has been pushing the boundaries of Splunk app development for over a decade. Their products target Splunk Enterprise and Splunk Cloud Platform, creating feature-rich experiences that exercise Splunk’s data collection, search, investigation, alerting, and visualization capabilities. Trying to stay on the cutting edge of Splunk’s offerings, Qmulos leverages tools such as the Splunk Machine Learning Toolkit (MLTK) app for advanced analytics and Splunk UI Toolkit for a modern UX experience.

Q-Compliance App: How Qmulos Revolutionized Cybersecurity with Splunk

Qmulos.png

Q-Compliance is Qmulos’s largest Splunk premium application, offering near real-time visibility into device compliance and security posture. It’s used by ISSOs, CISOs, Sec Ops, assessors and anyone else monitoring and reporting on IT infrastructure. It utilizes Splunk to collect data across many different categories such as network, firewall, account management, configuration management, and others that are required to be reported against as part of operating within the government and commercial space.

Built by a team experienced in large-scale cybersecurity solutions, Q-Compliance leverages Splunk to deliver continuous monitoring without the bottlenecks of traditional SQL databases. This enables efficient audit preparation and enterprise-wide reporting, enhancing security operations and team productivity.

Enhancing Development with Generative AI and Splunk Tools

The team has recently realized significant productivity gains by using generative AI to research approaches and prototype new features. Maintaining tight feedback loops is critical for productive development, so they routinely use various “soft reset” commands available in Splunk – such as “_bump” and the /debug/refresh pages – which allow engineers to quickly see the results of code changes without requiring a full restart. Similarly, the Splunk Add-on for Visual Studio Code simplifies the development and debugging of custom Python endpoints, further streamlining the workflow.

From Martial Arts to Masterpieces: Qmulos’s Team Got All the Moves (and the Games!)

Qmulos Dev Team.jpgQmulos is fortunate to have an uncharacteristically talented team. From award winning competitive martial artists, musicians that perform in and lead professional ensembles, to people who have appeared on television as actors. For fun, this amazing team is interested in sports and gaming (card games, board games, and video games).

 

Want you or your team to be our next Developer Spotlight? Let us know by filling out this form!

Contributors
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...