A complete security platform.Our own, and accessible.
It collects what happens on your machines, lets you search it, detects what falls outside normal, responds on the machine itself and leaves the evidence ready for an audit. All of it written by us: the program on the machines, the search, the detection engine and the console.
One console, twelve things it does.
What others sell as separate products is one account here. Each piece is explained below; this is the view of the whole.
Our own collection
Windows, Linux and macOS with a program that updates itself; your cloud services over HTTPS.
Search
All your logs, in the same language the big platforms use.
Ready-made detections
Our own tested library. Turn on the recommended ones in a click.
MITRE ATT&CK
Every detection tagged, and a map of which tactics you cover and which you do not.
Silence detection
Tells you when something that always happened has stopped happening.
Response on the machine
Cuts malicious addresses and domains in the machine’s own firewall.
Flows and notifications
Visual builder with conditions; Slack, Telegram, Discord, email or webhook.
Cases
Several alerts in one file, with its investigation log.
Inventory and vulnerabilities
Every machine’s software, matched against the public vulnerability catalogue.
Threat map
Where the attempts against your machines come from, live.
Compliance
NIST CSF 2.0, ISO 27001 and SOC 2 self-assessment over the real state of your account.
Ingest optimization
Duplicates, secrets and compression handled before the data leaves the machine.
Everything happening on your machines, in one place.
A lightweight program on Windows, Linux and macOS. It installs in minutes, starts reporting right away and updates itself, checking the signature before applying anything.
- Windows: Security and System event logs, PowerShell commands with the full script text, Defender alerts that actually mean something, and who created or changed a scheduled task.
- It turns on the auditing Windows ships disabled, so you do not depend on someone having configured it.
- Linux and macOS with their system logs, narrowed to what matters for security.
- A machine inventory every six hours: installed software, processes, open ports, accounts and networks. Changes become events you can search.
- Before anything leaves the machine it drops duplicates, strips secrets out of the text and compresses. If the network drops, it queues to disk and loses nothing.
- With nothing installed: your cloud services push their logs over HTTPS, or we read them from your bucket.
From a hunch to the cause, in one search.
A search engine over all your logs using the same language the big platforms use. No waiting for someone to export a file for you.
- Five investigations open at once, each with its own shareable link.
- A field panel: you see what each event carries and filter with one click, without memorising field names.
- Group identical events with their count, so a thousand repeated lines do not bury the one that matters.
- See context: what happened five minutes before and after an event, without writing another query.
- A timeline per device and per source, with the full original record behind every event.
- Search that ignores accents and case, because logs in Spanish are never written the same way twice.
You do not need to know what to look for.
We bring the detections written and tested. You switch the recommended ones on with a click and from there the platform watches on its own.
- Our own detection library, ready to enable, with no rule for you to write.
- Every detection tagged with MITRE ATT&CK, and a map showing which tactics you cover and which you do not.
- Silence detection: it warns when something that always happened stopped happening, which no ordinary rule sees.
- Known-indicator lists, plus an allowlist to silence the noise you already know is yours.
- Your own threshold rules, with the query tested before you save it.
- One alert per problem, not one per repeat.
The queue tells you what to handle, and the machine defends itself.
Alerts arrive ordered by urgency and explained in words, with the machines and users behind them. Not a list of codes.
- Every alert carries its evidence: the exact records that fired it.
- Cases: you gather several alerts into one file with its investigation log.
- Silence a machine, a user or an address from the alert itself, without leaving the screen.
- Blocking on the machine: the program cuts a malicious address or domain in the machine's own firewall.
- Notifications to Slack, Telegram, Discord, email or webhook, with quiet hours and a delivery log so you know they arrived.
- A visual flow builder, with conditions, so the response does not depend on someone watching.
The evidence they will ask you for, already assembled.
When a large customer, a bank or a certification asks you to show that you monitor, the answer is already in the console.
- Self-assessment against NIST CSF 2.0, ISO 27001:2022 and SOC 2, computed from your account's real state.
- Each control either passes on its own with written evidence, or stands as your own attestation when the platform cannot observe it.
- Software inventory per machine, cross-checked against the public catalogue of known vulnerabilities.
- Honest coverage: we tell you what could be analysed and what could not, instead of a round number.
- End-of-support warnings for the operating system, the vulnerability nobody looks at.
- Configurable dashboards and a console activity log: who did what, and when.
Ingest optimization, inside the platform
There are companies that make a living selling this as a separate service: filtering what your machines send so you pay less to store it. Here the program itself does it, before the data leaves the machine.
- Drops duplicates and noise that adds nothing to security.
- Scrubs secrets from the text before sending.
- Compresses, and if the network drops it queues on disk and loses nothing.
Less data travelling, less to pay, and nothing to buy separately.
Want to see it with your own data?
We show you the console with real data from a demo account and, if you want, we install the program on one of your machines during the same call.
Request a demoSame-day reply · WhatsApp or email