On-premises or air-gapped
Run all components and the local LLM in your datacentre. Scope offline update procedures for isolated environments.
Request a demoINTEGRATION CATALOGUE
| Category | Examples from the platform scope | Purpose |
|---|---|---|
| SIEM | Splunk, Microsoft Sentinel, QRadar | Ingest alerts, run investigations and assess detections. |
| Endpoint | EDR / XDR platforms | Review endpoint activity and coordinate containment. |
| Vulnerability scanners | Nessus, Qualys, Rapid7, OpenVAS, Defender VM | Normalise findings, prioritise risk and verify remediation. |
| Service management | ServiceNow, Jira, Remedy | Assign owners, track SLAs and close verified fixes. |
| Cloud & identity | AWS, Azure, GCP, Active Directory | Enrich events with audit logs, identities and asset context. |
| Network & devices | Firewall, VPN, Linux, Windows, IoT / OT | Collect through agents, syslog, APIs or passive monitoring. |
DEPLOYMENT OPTIONS
Run all components and the local LLM in your datacentre. Scope offline update procedures for isolated environments.
Deploy in your cloud account with your network controls and keys.
Place collectors across on-premises and cloud systems while keeping the AI core in your chosen location.
IMPLEMENTATION
Assess use cases, data sources, access requirements and integration dependencies.
Start in shadow mode, establish baselines and review results with analysts.
Expand log sources and use cases. Enable automation within agreed approval policies.
Review coverage, validate detections and adjust autonomy based on measured performance.
YOUR NEXT STEP
Define the security workflows, agent visibility and human controls your environment needs.