Cado Security

Cado Security is a cloud investigation and digital forensics company focused on helping security teams collect and analyze evidence across modern infrastructure. Its platform automates forensic data capture and investigation across AWS, Microsoft Azure, Google Cloud, containers, Kubernetes, SaaS applications, endpoints and on-premises environments. Cado is designed for security operations, incident response and forensic teams that need to investigate cloud incidents without manually collecting evidence from many different services and systems. The platform can preserve volatile data, automate endpoint triage, support business email compromise investigations and provide forensic context for cloud detection and response workflows. In 2025, Darktrace acquired Cado Security and began integrating Cado’s cloud forensic investigation technology with the Darktrace ActiveAI Security Platform. The acquisition gives Cado additional resources while extending Darktrace’s ability to collect and analyze evidence across hybrid and multicloud environments. Cado’s technology is particularly relevant because cloud workloads can be short-lived and evidence may disappear quickly if it is not captured during an incident. By automating collection and analysis, the platform helps responders reduce investigation time and improve consistency.