A modern, sovereign SIEM mapped to MITRE ATT&CK

Universal ingestion

Syslog RFC 3164/5424, K8s audit, custom JSON via collector.

Threat intelligence

abuse.ch feeds (URLhaus, MalwareBazaar, Feodo).

Response simulation (SOAR)

From an alert's detail view, the default playbook runs in simulation (enrichment, then a proposed IP block): no real action is executed, each step is logged in an immutable audit trail.

SecuAI Copilot

The copilot and AI chat reply in French by default, or in the user's language; all calls go through the sovereign SecuAI Gateway.

MSP multi-tenant

Partner console, per-tenant isolation, white-label branding, distributor billing with discount.

Intégration sources de télémétrie

Vos sondes de monitoring et sources de télémétrie converties en signaux de sécurité. Corrélation native logs + métriques.

Pre-built dashboards

Alert view with MITRE ATT&CK mapping.

Hosted in Quebec.

Quebec residency

No. Ingestion, storage, indexing, search and analysis of your logs run at OVH Beauharnois (Québec). The notifications you enable (email, Slack…) go through those channels' providers.

Multichannel alerting

Email, Slack, PagerDuty and signed webhook (HMAC).