PAGES
← all tools
◆ SIEM

ClickHouse

1.0 open-source

ClickHouse® is a real-time analytics database management system

Summary

ClickHouse is an open-source (Apache 2.0), column-oriented database management system that generates analytical data reports in real time, storing and querying data organized by column rather than row to make large-scale aggregation fast. Teams install it as a single binary on Linux, macOS, or FreeBSD, or run it as a managed service through ClickHouse Cloud, built by the same team that maintains the open-source project. In the siem space it functions as a security data lake, giving SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. teams and platform engineers a backend to store and run OLAP-style queries over large volumes of log data rather than a packaged detection or alerting layer. Launched in 2016, it remains actively developed, with 55 tracked releases and a last release 12 days ago.

ClickHouse® is a real-time analytics database management system

How ClickHouse helps

Which servers or services are showing unusual spikes in traffic right now?

ingests and aggregates high-volume log and event data with column-oriented storage, letting a query across millions of rows return in real time instead of after a batch job finishes

Where did a suspicious user session go across our infrastructure over the last month?

stores raw log and event history in a queryable table rather than a rolling window, so a single query can trace one identity or IP across weeks of records

Which piece of our stack is producing the most log volume and driving up our storage bill?

groups and counts events by source, host, or service across the full retention window in one aggregation pass

Are last week's alerting rules still catching what they used to?

keeps the full history of raw events, so a changed detection query can be re-run against the same past data to compare what it flags now versus before

Who has access to which piece of our deployment, and did that access just change?

records for organizations, members, roles, and keys are held as queryable data, so a query can show current grants or when a role or key was added or removed

all 18 features, with the evidence for each →

Languages

Not documented

Features

18 capabilities · 11 backed by code, an API document or a real run

Built from ClickHouse's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What ClickHouse offers you

  • REST API14
  • Command-line interface1
  • Role-based access control1
All capabilities 18 capabilities
ClickHouse service management verified Provision, configure, and manage ClickHouse services and their lifecycle through the API. 2 releases · 23 other sources · first seen Sep 2026

Also counts toward: REST API

release

docs

  • - [Database (1703 pages)](https://clickhouse.com/docs/_llms/en/database.md): Documentation for Database. - [Solutions (641 pages)](https://clickhouse.com/docs/_llms/en/solutions.md): Documentation for Solutions. seen Sep 2026 · source

command line

api 21 total

ClickPipes data ingestion management verified suggested Manage ClickPipes data ingestion pipelines, including creation, configuration, and deletion. 2 releases · 18 other sources · first seen Sep 2026

Suggested capability: Log collection. This is our guess, not confirmed.

Also counts toward: REST API

release

  • GET /v1/organizations/{organizationId}/services/{serviceId}/clickpipes: param cursor (query) added; param limit (query) added 1.0 · Nov 2026 · source · release history
  • Clickpipes (18 endpoints) — create, read, update, delete 1.0 · Sep 2026 · source · release history

api 18 total

  • GET /v1/organizations/{organizationId}/services/{serviceId}/clickpipes/{clickPipeId} · source · full API surface
  • GET /v1/organizations/{organizationId}/services/{serviceId}/clickpipesReversePrivateEndpoints · source · full API surface
  • GET /v1/organizations/{organizationId}/services/{serviceId}/clickpipesCdcScaling · source · full API surface
  • GET /v1/organizations/{organizationId}/services/{serviceId}/clickpipes/{clickPipeId}/settings · source · full API surface
  • GET /v1/organizations/{organizationId}/services/{serviceId}/clickpipes · source · full API surface
  • GET /v1/organizations/{organizationId}/services/{serviceId}/clickpipesReversePrivateEndpoints/{reversePrivateEndpointId} · source · full API surface
Postgres integration management verified Create, read, update, and delete Postgres integrations connected to the platform. 1 release · 19 other sources · first seen Sep 2026

Also counts toward: REST API

release

api 19 total

User and role management verified Manage users, roles, and access permissions within the platform. 2 releases · 12 other sources · first seen Sep 2026

Also counts toward: Role-based access control, REST API

release

  • User Management (8 endpoints) — create, read, update, delete 1.0 · Sep 2026 · source · release history
  • 4 more areas: Api Keys, Prometheus, Role Management, Billing 1.0 · Sep 2026 · source · release history

api 12 total

Organization management verified Administer organization-level settings, membership, and configuration. 2 releases · 11 other sources · first seen Sep 2026

Also counts toward: REST API

release

  • GET /v1/organizations: param cursor (query) added; param limit (query) added 1.0 · Oct 2026 · source · release history
  • Organization (11 endpoints) — create, read, update, delete 1.0 · Sep 2026 · source · release history

api 11 total

User-defined function (UDF) management verified Create, read, update, and delete user-defined functions in the platform. 1 release · 12 other sources · first seen Sep 2026

Also counts toward: REST API

release

api 12 total

API key and billing management verified Manage API keys, Prometheus metrics access, and billing configuration through the API. 2 releases · 9 other sources · first seen Sep 2026

Also counts toward: REST API

release

api 9 total

Backup management verified Create, read, update, and delete backups for managed data resources. 3 releases · 7 other sources · first seen Sep 2026

Also counts toward: REST API

release

  • New endpoint GET /v1/organizations/{organizationId}/postgres/{postgresId}/backups 1.0 · Oct 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/query-api-endpoints 1.0 · Sep 2026 · source · release history
  • Backup (8 endpoints) — create, read, update, delete 1.0 · Sep 2026 · source · release history

api 7 total

JWT provider management shipped Create, read, update, and delete JWT providers configured for a service. 5 releases · first seen Nov 2026

Also counts toward: REST API

release

  • New endpoint DELETE /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders/{jwtProviderName}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 1.0 · Nov 2026 · source · release history
  • New endpoint POST /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders 1.0 · Nov 2026 · source · release history
  • New endpoint PUT /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders/{jwtProviderName} 1.0 · Nov 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders/{jwtProviderName} 1.0 · Nov 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/jwtProviders 1.0 · Nov 2026 · source · release history
BYOC infrastructure inspection shipped Retrieve status and progress for Bring Your Own Cloud infrastructure resources. 5 releases · first seen Sep 2026

release

  • New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}/tags 1.0 · Oct 2026 · source · release history
  • New endpoint POST /v1/organizations/{organizationId}/byocInfrastructure/validate 1.0 · Oct 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}/privateEndpointConfig 1.0 · Oct 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 1.0 · Sep 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/byocInfrastructure/{byocInfrastructureId}/progress 1.0 · Sep 2026 · source · release history
Saved query management shipped Create, read, update, and delete saved queries associated with a service. 5 releases · first seen Oct 2026

Also counts toward: REST API

release

  • New endpoint DELETE /v1/organizations/{organizationId}/services/{serviceId}/saved-queries/{queryId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 1.0 · Oct 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/saved-queries 1.0 · Oct 2026 · source · release history
  • New endpoint POST /v1/organizations/{organizationId}/services/{serviceId}/saved-queries 1.0 · Oct 2026 · source · release history
  • New endpoint PUT /v1/organizations/{organizationId}/services/{serviceId}/saved-queries/{queryId} 1.0 · Oct 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/saved-queries/{queryId} 1.0 · Oct 2026 · source · release history
ClickHouse documentation and reference documented Provides access to comprehensive documentation covering database usage, solutions, and resources for the ClickHouse platform. 5 other sources

docs

  • - [Database (1708 pages)](https://clickhouse.com/docs/_llms/en/database.md): Documentation for Database. - [Solutions (686 pages)](https://clickhouse.com/docs/_llms/en/solutions.md): Documentation for Solutions. seen Oct 2026 · source
  • - [Database (1740 pages)](https://clickhouse.com/docs/_llms/en/database.md): Documentation for Database. - [Solutions (673 pages)](https://clickhouse.com/docs/_llms/en/solutions.md): Documentation for Solutions. seen Oct 2026 · source
  • - [Database (1706 pages)](https://clickhouse.com/docs/_llms/en/database.md): Documentation for Database. - [Solutions (686 pages)](https://clickhouse.com/docs/_llms/en/solutions.md): Documentation for Solutions. seen Oct 2026 · source
  • - [Database (1706 pages)](https://clickhouse.com/docs/_llms/en/database.md): Documentation for Database. - [Solutions (685 pages)](https://clickhouse.com/docs/_llms/en/solutions.md): Documentation for Solutions. seen Oct 2026 · source
  • - [Database (1706 pages)](https://clickhouse.com/docs/_llms/en/database.md): Documentation for Database. - [Solutions (685 pages)](https://clickhouse.com/docs/_llms/en/solutions.md): Documentation for Solutions. - [Resources (212 pages)](https://clickhouse.com/docs/_llms/en/resources.md): Documentation for Resources. seen Oct 2026 · source
Docker official image build tooling verified Generate Docker library definition files and the official Docker image directory structure for distribution. 3 other sources · first seen Oct 2026

Also counts toward: Command-line interface

command line

  • generate-ldf — generate docker library definition file v26.10.2.103-stable · Oct 2026 · command-line history
  • generate-tree — generates directory `docker/official` v26.10.2.103-stable · Oct 2026 · command-line history
  • to_ref — git ref for the changelog end v26.10.2.103-stable · Oct 2026 · command-line history
Snapshot management verified Create, configure, and manage service snapshots for data persistence and restoration. 2 releases · 1 other source · first seen Sep 2026

Also counts toward: REST API

release

  • GET /v1/organizations/{organizationId}/services/{serviceId}/snapshots: param cursor (query) added; param limit (query) added 1.0 · Oct 2026 · source · release history
  • GET /v1/organizations/{organizationId}/keys: param cursor (query) added; param limit (query) added 1.0 · Sep 2026 · source · release history

command line

  • pr-query-history — Compare one query across all PR dashboard runs v26.7.6.57-stable · Sep 2026 · command-line history
Notification type management shipped Retrieve available notification types defined within an organization. 2 releases · first seen Oct 2026

Also counts toward: REST API

release

  • New endpoint GET /v1/organizations/{organizationId}/notifications⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 1.0 · Oct 2026 · source · release history
  • New endpoint GET /v1/organizations/{organizationId}/notificationTypes⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 1.0 · Oct 2026 · source · release history
Replica-aware routing management shipped Retrieve and update replica-aware routing configuration for a service. 2 releases · first seen Oct 2026

release

  • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/replicaAwareRouting⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 1.0 · Oct 2026 · source · release history
  • New endpoint PATCH /v1/organizations/{organizationId}/services/{serviceId}/replicaAwareRouting 1.0 · Oct 2026 · source · release history
Query API endpoint management verified Manage dedicated query API endpoints for services. 1 release · 1 other source · first seen Sep 2026

Also counts toward: REST API

release

  • New endpoint GET /v1/organizations/{organizationId}/services/{serviceId}/query-api-endpoints/{endpointId} 1.0 · Sep 2026 · source · release history

command line

Webhook validation shipped Validate webhook configurations for ClickStack services. 1 release · first seen Oct 2026

Also counts toward: REST API

release

  • New endpoint POST /v1/organizations/{organizationId}/services/{serviceId}/clickstack/webhooks/validate⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ 1.0 · Oct 2026 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface
  6. Community health
  7. Contributor trend distinct committers, this year against last
  8. Maintainer concentration bus factor now against a year ago
  9. Issue backlog trend issues closed per issue opened, 12 months
  10. Responsiveness median time to a maintainer’s first reply

Nine scores for ClickHouse, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail ClickHouse puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Commercials

pricing & packaging history · ClickHouse vendor page

41 readings of ClickHouse's pricing page since Oct 2022, with 3 relaunches of its plan lineup and 16 changes to what its plans include — each one dated, compared with the reading before it, and explained for someone buying the tool.

Pricing and packaging history is included with Researcher and Business. See how every vendor we track sells, and how that has changed over time, using data we don't publish anywhere else.

See plans →

Website history

runreveal.com, every change

ClickHouse's home and pricing pages and 8 more pages as they looked each month from January 2023 to October 2026: 17 renders, 5 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Coverage

Missing something? Tell us

What ClickHouse connects to, runs on and detects, read from its release notes and docs. So far: 1 new integration.

Show

1 change, tracked since Sep 29, 2026.

  • Sep 292026

    new Integrations documentation index

    With connectors

    Integrations (245 pages): Documentation for Integrations. - English / Integrations (245 pages): Documentation for English / Integrations. - English / Integrations / Connectors (120 pages): Documentation for English / Integrations / Connectors.

    Source ↗

How we count

Read from 1 of 22 release notes and docs updates we hold for ClickHouse. "First seen" is the earliest note that names something; "last" is the latest. Our history may start partway through ClickHouse's life, so an old integration can show a recent first-seen date.

Each change counts once: "added 40 checks" is one line, so the numbers measure how often coverage moves, not how big the catalogue is or how well it detects.

Releases

Show
Coverage in all entries

22 entries

  1. November 20261
  2. October 20264
  3. September 20266
  4. August 20261
  5. July 20261
  6. June 20261
  7. May 20261
  8. April 20261
  9. March 20261
  10. February 20261
  11. January 20261
  12. March 20251
  13. August 20241
  14. December 20231
    Show
    Coverage in all entries

    22 entries

    Project health

    Issue, contributor and maintainer activity in ClickHouse/ClickHouse, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.

    1. Contributors 725 +209 vs prior 12 months
    2. Maintainers 47 +18 joined · −20 left, last 12 months
    3. Bus factor 10 committers behind half the commits
    4. Community-filed 48% of issues opened, last 12 months
    5. Median time to close 29 days first maintainer reply 7.5 days
    6. Open backlog 5,164 of 13,133 issues ever filed
    1. Issues opened / month 186 · 271 communitymaintainers
    2. Open backlog 5,164
    3. Contributors / month 197
    4. Commits / month 5,713
    5. Stars not measured
    Issue themes, last 12 months
    • bugs 37%
    • features 10%
    • questions 4%
    • docs 1%
    • other 48%

    Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →