Through transparent partnership, Sentry transformed their detection engineering approach while achieving significant cost savings.
“The amount of transparency with RunReveal is the highest I've had with any vendor.”
Sentry is a powerhouse in application error monitoring, serving developers worldwide with their source-available SaaS platform. With nearly 400 employees and growing fast, Geoff Goldsmith, a Senior Security Engineer, was responsible for managing the entire detection and response operation while juggling bug bounty triage, core product fixes, and countless other security responsibilities.
"We needed to be able to ramp up our detection engineering, with limited headcount and few hours in the day," Geoff explains.
Sentry's journey with RunReveal began long before they became a customer. For an entire year, Geoff served as a crucial design partner to the RunReveal team when they were just three people building their vision of a better SIEM.
"I've seen the [RunReveal] underbelly for so long," Geoff reflects. This early relationship gave him unique insight into RunReveal's approach to solving security problems and their genuine commitment to listening to experienced detection engineers like himself.
The transparency was unlike anything he'd experienced. "The amount of transparency with RunReveal is the highest I've had with any vendor," he notes.
Sentry was already using a competing SIEM that was covering their needs. "It was all Python, really programmatic, and gave you a lot of control," said Geoff.
But RunReveal was able to cover Sentry's needs more affordably, all while acting as a partner that understood the realities of a modern security team. It wasn't about spending less—but spending smart. For a security team at a rapidly growing company, getting that budget back meant more resources for everything else they want to accomplish.
The decision wasn't just about finding a cheaper alternative; it was about finding a partner who understood the reality of modern security teams and could help them do more with less.
The ROI of migrating to RunReveal became apparent almost immediately. Shortly after implementation, RunReveal's team flagged that Sentry was ingesting massive amounts of unnecessary GCP logs.
"[The RunReveal team] highlighted a particular log type being ingested. Immediately I wanted to know why we are generating and delivering so many logs downstream?" Geoff recalls.
This conversation sparked a deeper investigation that revealed a configuration problem Sentry didn't even know they had. Within a week, Geoff had identified the root cause and eliminated 97% of the wasteful logging upstream.
The financial impact of reducing this logging was immediate: roughly $100 in daily savings, translating to tens of thousands of dollars saved per year and significantly on the ingestion quota for RunReveal.
This moment also demonstrates the difference in vendor philosophy: While traditional SIEM providers benefit from higher data volumes, RunReveal's success is tied to customer success, creating incentive alignment that is rare in the security vendor landscape.
Beyond immediate cost savings, RunReveal enabled Sentry to build a more sustainable approach to detection engineering. The platform became their primary logging source for all security data.
The architecture improvements were subtle but meaningful. Geoff particularly notes that RunReveal's simpler infrastructure eliminates complexity that adds up over time.
The relationship between Sentry and RunReveal demonstrates how customer feedback can drive meaningful product improvements when vendors are genuinely committed to listening.
"We made a lot of product recommendations that were implemented pretty rapidly, and still are implemented rapidly," Geoff explains. This isn't about feature requests disappearing into a backlog; it's about experienced security practitioners directly influencing product development for the better.
This feedback loop created tangible improvements that directly addressed Sentry's operational needs. Geoff wanted deeper visibility into how their RunReveal Pipelines were performing—were they dropping the right data? How effective were the configurations?
"After chatting about this with the RunReveal team, RunReveal implemented Pipeline Metrics," Geoff explains. Now he and his team have complete, quantifiable performance metrics for their pipelines, giving them the operational transparency that's critical for a security team managing rapidly growing data.
This wasn't just a feature request fulfilled; it was a genuine partnership where Sentry's real-world challenges directly shaped product development, benefiting not only their team but all RunReveal customers.
As Sentry's security program matures, RunReveal provides the foundation for expansion without the traditional scaling fears. "It's our main logging source now for all security logging and is going to expand more with time," Geoff notes.
The team's goals are "coverage-oriented," focusing on building comprehensive detection across their environment rather than worrying about whether their SIEM can handle the growth or whether costs will spiral out of control.
This confidence comes from having a partner who proactively helps optimize costs rather than benefiting from inefficiency.
RunReveal delivered transformative value for Sentry, generating considerable annual savings through cost optimization while simultaneously improving their security posture. The platform's simplified infrastructure and code-first approach provided crucial operational efficiency gains that scale with limited headcount—essential for fast-growing companies facing traditional SIEM scaling challenges.
Beyond typical vendor relationships, Sentry gained direct influence on RunReveal's product roadmap through transparent collaboration, ensuring the platform evolved to meet their specific needs.
For security leaders at high-growth companies, Sentry's experience demonstrates how the right vendor partnership transforms operational constraints into competitive advantages, delivering immediate financial benefits while creating a scalable path forward for expanding security requirements.