Jazz brings Melody's DLP investigations into CrowdStrike's Falcon console

Why it matters

Jazz is using CrowdStrike for distribution, trust and workflow access. That can shorten enterprise sales, but Melody's filtering claims still need independent proof.

Ido Livneh, Jazz's co-founder and CEO, brought the cybersecurity startup's Melody investigator into CrowdStrike's Falcon console on Monday, giving Jazz a direct route into security teams already using CrowdStrike's platform.

Jazz announced the integration at Fal.Con 2026 in Las Vegas. Falcon customers can install the Jazz app through the CrowdStrike Marketplace and review Jazz's data-loss prevention findings without moving into a separate console. Jazz says the integration does not require customers to deploy another endpoint agent or change their existing Falcon workflow.

That last point needs a precise reading. The integration does not add another agent, but Jazz's wider product still uses its own forensic endpoint component, called Context Vault. The marketplace listing identifies the Falcon offering as a data connector. This is a distribution and workflow integration, rather than an agentless replacement for Jazz's underlying DLP deployment.

For Livneh, the launch converts an accelerator trophy into something materially more useful: access to CrowdStrike's installed customer base and a place inside the console where analysts spend their day.

Four founders rebuilding DLP around investigation

Livneh founded Jazz in late 2024 with Jake Turetsky, Noam Issachar and Yonatan Zohar. All four came through Unit 81, an Israeli military technology unit whose alumni have seeded a long list of cybersecurity startups.

Livneh spent more than a decade in Unit 81, where he led work on mission-critical cyber systems. He later ran product organizations at Axonius and Laminar, the cloud data-security startup acquired by Rubrik, after an earlier product role at Tapingo. His training spans electrical engineering, physics and computer science, a useful mix for a founder trying to combine low-level endpoint telemetry with an AI investigation layer.

Turetsky, Jazz's chief AI officer, previously founded an algorithmic-trading business and led a cyber team in Unit 81. Issachar, Jazz's chief business officer, was a founding engineer at Oligo Security before working with enterprise customers as a solutions architect at Axonius. Zohar, Jazz's chief technology officer, previously led low-level engineering work at Toka.

Their premise is straightforward: conventional DLP software detects patterns and policy violations, then hands the expensive work of determining intent to a human analyst. Jazz built Melody to handle more of that investigation before an alert reaches the analyst.

Melody examines the data involved, the systems it moved between, the people connected to the activity and the surrounding business process. Jazz says the software uses those inputs to decide whether a transfer resembles ordinary work or a meaningful risk, then attaches a narrative and supporting evidence to the finding.

Jazz has offered eye-catching examples of that filtering. In one deployment, Jazz said Melody processed 2 million signals and produced about 80 investigated incidents. Jazz has not published an independent benchmark showing the detection coverage, false-negative rate or methodology behind the result. The Falcon integration puts those conclusions in front of more analysts; it does not independently validate them.

CrowdStrike becomes the route to the analyst

CrowdStrike designed Falcon Foundry for applications that run inside Falcon and use its data, APIs, interface and workflow tools. For a young security vendor, building there can remove a familiar enterprise-sales obstacle: persuading customers to adopt another dashboard and another operational process.

The arrangement also serves CrowdStrike's platform strategy. Foundry lets CrowdStrike widen Falcon's capabilities through outside developers while keeping the customer's investigation workflow centered on Falcon. Jazz gets distribution and borrowed trust. CrowdStrike gets another specialized data-security function inside its console.

Jazz won the eight-week, equity-free CrowdStrike, AWS and NVIDIA Cybersecurity Startup Accelerator in 2026, after a program that Jazz said attracted nearly 1,000 applicants. The Foundry release arrived in the same year, converting the startup program into a marketplace integration.

CrowdStrike Chief Business Officer Daniel Bernard described that progression as the kind of result the accelerator was built to produce. Cooper Machinery Services information security engineer Ramon Espinosa Jr., whose endorsement Jazz included in Monday's announcement, said combining Jazz's business context with Falcon's security context allows analysts to spend less time manually reconstructing an incident.

The money behind the push

Jazz announced $61 million in combined seed and Series A funding on March 10, 2026, led by Glilot Capital Partners and Team8. Calcalist reported that the Series A accounted for $43 million. Ten Eleven Ventures, Merlin Ventures, Encoded Ventures and MassMutual Ventures also participated, according to Jazz.

At the time, Calcalist reported that Jazz had 45 employees and 15 paying customers. Jazz separately named Lemonade, AlphaSense and CAVA among its production users. Those March figures establish that Jazz had moved beyond design partnerships before the public launch, though they do not establish its current customer count, revenue or retention.

Jazz is entering a busy DLP market that includes established suites and newer vendors pitching AI-driven investigations. Its near-term advantage may come from placement as much as model performance. Security buyers routinely resist another agent, console and queue of alerts. Jazz still has an endpoint component, but the Foundry app moves its output into a system many prospective customers already operate.

The bet now is that Falcon distribution can shorten enterprise adoption without reducing Jazz to a feature inside a larger platform. CrowdStrike is giving Jazz a larger room in which to prove its product claims.