WORKFLOW DESIGNER
The visual designer enables cyber architects, analysts or developers to quickly design workflows, playbooks or checklists with conditional states and transitions. Developers can quickly develop custom tasks or activities with custom data types to add rich functionality and create integrations to existing systems.
ORCHESTRATION ENGINE
The orchestration engine executes multiple workflows triggered from multiple sources by creating and running instances within an isolated or shared context which can be scaled horizontally. The platform is solution and OS agnostic. The notification manager publishes every step of the instance's life-cycle and tracks logs for auditing and reporting.
SERVICE MANAGER
The visual service manager is a web application that leverages the orchestration tool engine's actions to present the end-users an interface to interact with the engine to upload and manage playbook definitions, custom activity libraries and data types.
Differentiators
Distributed computing architecture: manage playbooks centrally but execute them in a zero-trust netw
State Machine BPM Platform
A true powerful BPM engine at the core of our platform. End to end security platform with API-first architecture. Easily integrate to SIEMs or other log sources through Web Hooks;
Eliminate Python programming
Anyone with basic .NET skills can create custom rules and triggers in a visual manner
Unlimited capability of designing rules and playbooks
Powerful automation capabilities which can run one or multiple workflows and sub-workflows with scheduling capabilities.
Pure end-to-end integration with case management
Our integrated security incident management tool can extend to cover an end-to-end cycle of a threat investigation and resolution, with the capability of retaining historical activities for future lessons learned and best practices. The playbook does not have to stop at the ticket creation step !
Extendible to many technologies and platforms
Horizontal scalability and deployable as container on orchestrators;
Hooks to Threat Events ! Elastic SIEM, Microsoft ATA, Sentinel, EDR and more !
Affordable license pricing model
Workflow Engine Architecture
- 3 microservices
- 2 type of listeners (http rest API and service hub)
- Data storage
Security
- Integration with host applications security
- Internal and external security
- Installed in a container
Integration with Elasticsearch, visualization with Kibana and integration with Endpoint Security.