Question 1

What is a SIEM and why would I want one?

Accepted Answer

A SIEM collects the logs from all your machines and systems in one place, analyzes them and alerts you when something is off: access attempts, malware, odd behavior. Without one, attacks are discovered weeks later — with one, while they are happening.

Question 2

I already have antivirus. Isn’t that enough?

Accepted Answer

Antivirus protects each machine on its own and only against what it recognises. It does not see the picture: SSH login attempts, a user signing in at 3 a.m., data leaving where it should not. The platform looks at all of it together and finds the pattern. They complement each other; neither replaces the other.

Question 3

Will you see what I do on my computer?

Accepted Answer

No. The agent records security events — logins, processes that run, configuration changes — not your screen, your files or your email. Capturing visited pages is off by default and only your administrator turns it on if you need it. The agent also strips secrets and passwords out of the text before it leaves the machine.

Question 4

How long does setup take?

Accepted Answer

The program installs in about 5 minutes per machine (Windows, Linux or macOS) and starts reporting right away. If we run it for you, we install and tune everything; a full start typically takes days, not weeks.

Question 5

Is there a minimum number of machines?

Accepted Answer

No. One is enough. The $299 a month entry price covers up to 5 devices, so whether you have one or five you pay the same: it is a floor, not a requirement. Above that the price scales with how many we watch.

Question 6

Everything of ours is in the cloud and we have no servers. Does this still work?

Accepted Answer

Yes. Your people's computers run the agent, and your cloud services either push their logs to us over HTTP or we pull them from your bucket. You do not need a server of your own for this to work.

Question 7

What happens if you detect something at 3 a.m.?

Accepted Answer

The platform fires the alert on its own. If the threat is on a blocklist, the agent cuts it off on the machine right then, without waiting for anyone. Then one of our analysts reviews the context: which machine, which user, what else happened around it. If it is noise it gets closed and you never hear about it; if it is real we contact you with what happened, what we contained and what is left for you to do.

Question 8

Will the agent slow my machine down?

Accepted Answer

It is a single lightweight program with no interface, which gathers events and sends them compressed every few seconds instead of one at a time. It also drops duplicates before sending. If it still gets in the way, each kind of collection can be switched off separately from the console.

Question 9

Where does my data live and for how long?

Accepted Answer

Your logs are stored encrypted in the cloud, kept apart from other customers’, with 90 to 180 days of retention depending on your plan. Only your team (and ours, if you hire the monitoring) can see them.

Question 10

What about Costa Rica's data protection law (8968)?

Accepted Answer

Your company's data is yours: you are the data controller and we act as the processor, handling it only on your instructions and to deliver the service. We are a Costa Rican company and we will sign the processing agreement you need. Informing your own staff about the monitoring is your responsibility, as the law requires.

Question 11

If I leave, do I take my data with me?

Accepted Answer

Yes. From the console you can export any search to CSV or JSON at any time while the service is active. When the account closes, your logs and configuration are deleted per the retention policy. There is nothing we hold hostage.

Question 12

What’s the difference between using the platform and having you watch it?

Accepted Answer

The platform is the tool: you or your team review the alerts. With 24/7 monitoring it is the tool plus our team: we watch all day, throw out the noise and only contact you when something matters. If you have no security staff, that is your plan.

Question 13

Is there a lock-in contract? Can I cancel?

Accepted Answer

Self-serve plans are monthly and cancel whenever you want: you finish the month you already paid and that is it. Contracts with our monitoring, and enterprise ones, set their term in the negotiation.

What every company asks before signing.

The basics

How it works

Data and privacy

Price and contract