Bring your alerts. Leave with cases.
Tell us about your estate and we come back within one business day with a session slot. Thirty minutes on your own telemetry, whatever stack produces it: your alerts through the correlation engine, one real case through SIROC, and the edition and add-ons that fit the way you work. Nothing leaves your perimeter to do it.
- Reply within one business day with a slot and a short questionnaire about the sources that produce your alerts — open-source stacks, market platforms, or both. If a source is not on our list, we build the connector.
- A thirty-minute session on your own telemetry: your alerts through the correlation engine, one case through SIROC with its hypotheses and evidence laid out, and the decision trace read aloud — what your analysts would see on day one.
- A scoped quote per deployment and per year — no per-GB, no per-endpoint, no per-tenant line. You know the cost before the first byte is ingested.
- Start free the same day if you already run Wazuh: the free edition installs on one box, and the path up to the Client edition is on the Wazuh page.
We are early, and we would rather build with a handful of operators than guess. Design partners get the platform on their estate, a direct line to the people who build it, a say in what ships next, and the first published outcomes with their name on them if they want it. In return we ask for honest feedback and a reference once we have earned one.
Found something? Our coordinated-disclosure policy and contact are on the trust page.