Scanner (scanner.dev) is a San Francisco-based security data platform founded in 2022. It lets organizations search and query petabytes of log data stored in Amazon S3 — think years of cloud, network, and endpoint logs — at near-instant speeds. Traditional SIEMs force a painful tradeoff: pay high ingestion fees for 30-day searchable retention, or dump logs cheaply into object storage where queries take hours. Scanner eliminates this by building inverted indexes directly on S3 at ingest time, then spinning up compute only when a query runs, and spinning it back down when done. The result: security teams can search a petabyte of logs for an IP address in seconds, not hours, at a fraction of Splunk or Datadog pricing. The platform supports out-of-the-box detection rules (MITRE-mapped), Detection Rules as Code via GitHub, and an MCP server that connects AI agents to the data lake for autonomous triage, detection engineering, and incident response. Customers include Notion, Ramp, and BeyondTrust. Built in Rust.