Everything your SOC needs,
running on your hardware
One platform. Complete detection, correlation, response, and reporting — with no cloud dependency.
Detection & Response
03 capabilitiesMulti-agent AI
SOC Agent, Metrics Monitor, Process Monitor, Email Monitor, Device Monitor — each specialized, all coordinated.
Real-time correlation
Cross-event pattern analysis. Detects attack chains, not just individual alerts.
Auto-remediation
9 response triggers: IP blocking (single/range/CIDR), process kill, file quarantine, source-only or fleet-wide.
Monitoring Coverage
03 capabilitiesLogin monitoring
SSH, RDP/Console, LoginWindow. Physical logins tracked with username, IP, and business-hours awareness.
Email security
BEC, impossible travel, MFA bypass, inbox forwarding rules, SPF/DKIM/DMARC validation, whaling detection.
Device management
USB/Thunderbolt monitoring, block_all / monitor_only / allow_whitelist policies, vendor & product ID tracking.
Intelligence & Enrichment
03 capabilitiesThreat intelligence
MITRE ATT&CK mapping (25+ techniques), CVE integration, known-bad IP/domain database.
IPQS enrichment
IP, email, and domain reputation as first-class evidence in every alert.
Live dashboard
Alert feed, correlated incidents, attack timelines, risk scores — one unified view.
Automation & Workflows
03 capabilitiesPlaybooks
Sub-2-second response. Firewall rules, AD token revocation, host isolation — triggered automatically.
Conversational AI
Chat with your analyst about alerts. It remembers context and can take actions on your behalf.
Approvals
Maker-checker workflow for high-risk actions. Human review before the AI executes.
MITRE ATT&CK techniques detected
Every alert mapped to standard techniques with pre-built response playbooks.
Integrates with your existing stack
Drop-in compatibility. No need to replace your SIEM, ticketing, or alerting tools.
Every plan. Full platform.
The only difference between plans is volume and support level.
| Feature | Starter | Professional | Business | Enterprise |
|---|---|---|---|---|
| Alerts / month | 2,000 | 10,000 | 50,000 | Custom |
| Concurrent agents | 2 | 5 | 10 | Custom |
| All AI features | ||||
| All integrations | ||||
| Email + device monitoring | ||||
| Auto-remediation | ||||
| MITRE mapping | ||||
| Dedicated support | — | — |
See it on your own infrastructure
Deploy in minutes. Keep everything local.