Collection & normalisation
Syslog, agents and APIs into one common schema, with parsing for common network, system and security sources.
Published by Nexflow · Security monitoring, hosted where your data lives
NEXFLOW SIEM
NEXFLOW SIEM is the security information and event management platform we are building for organisations that need full visibility without sending their logs abroad. It is designed to work hand in hand with our SOC L1 Triage Agent, EDR and PAM.
Coming soonJoin the waitlist
01 · The problem
Logs everywhere, visibility nowhere
Firewalls, servers, applications and cloud services all log differently, and most of it is never looked at. Without correlation, the signal of an attack is lost in millions of lines.
02 · Planned capabilities
Correlation & detection
Real-time rules mapped to MITRE ATT&CK, tuned for local threats and sectors.
Behaviour analytics
User and entity baselines that surface anomalies rules cannot describe.
Investigation & cases
Timelines, search and case management for analysts, with the SOC L1 agent doing the first pass.
Compliance & retention
Retention policies and reports for loi 2004-63, BCT circulars, ISO 27001 and PCI DSS.
Open integration
Feeds from EDR and PAM, tickets to your ITSM, and an API for everything else.
03 · Under the hood
- Status
- In development, coming soon
- Deployment
- On-premise or private cloud
- Works with
- SOC L1 Triage Agent, NEXFLOW EDR, NEXFLOW PAM, ITSM tools
04 · Join the waitlist
Join the NEXFLOW SIEM waitlist
NEXFLOW SIEM is in development. Be among the first to try it, we will contact you when early access opens. No newsletter, no spam.
Frequently asked questions
When will NEXFLOW SIEM be available?
It is in active development. Join the waitlist and we will contact you when the early-access programme opens.
We already have a SIEM. Is this for us?
Our consultants integrate and run existing SIEMs such as LogRhythm today. NEXFLOW SIEM is an alternative for organisations that want a sovereign, locally supported platform.
Other Nexflow solutions
Available
NEXFLOW CLM
Contracts from draft to archive, approvals, e-signature, obligations and a tamper-evident audit trail, installed on your premises.
Discover
Available
SOC L1 Triage Agent
Triage every alert in minutes: enrich, deduplicate, score, map to MITRE ATT&CK and escalate with evidence, with a human in control.
Discover
Coming soon
NEXFLOW GRC
Risks, controls, vendors, vulnerabilities and AI systems in one connected graph, with explainable scoring and an audit trail you can trust.
Discover
Coming soon
NEXFLOW EDR
A lightweight agent that watches what runs on your workstations and servers, stops suspicious behaviour and lets analysts respond in one click.
Discover
Coming soon
NEXFLOW PAM
Vault admin credentials, grant access just in time, record every privileged session and give auditors the trail they ask for.
Discover
Coming soon
NEXFLOW EBIOS RM
Run the five EBIOS RM workshops in one guided tool, from business values and risk sources to attack scenarios and a treatment plan your board can read.
Discover