[ SELF-HOSTED CYBERSECURITY ]

THE MISSING FORENSIC TOOLKIT.

For prevention and post-incident investigation: fast, reliable analysis on your own server.

// PRINCIPLE_01

Your evidence stays home.

Event logs, suspicious files, emails: your most sensitive data is analyzed on your own server. External lookups (VirusTotal, AbuseIPDB) run only if you turn them on.

// PRINCIPLE_02

Minutes, not days.

Work faster and more effectively: the tools handle the routine work, so the analyst only has to evaluate the results.

// PRINCIPLE_03

From small teams to large SOCs.

It works for a one-person IT team just as well as for a full analyst team: it runs on a single server and fits into the workflows of a large SOC.

> PRODUCT SUITE

Where attacks leave traces.

Focused tools for four critical areas: Windows event logs, suspicious files, phishing emails and web server logs.

LogStalker

Rapid investigation of event logs from compromised or suspicious Windows workstations and servers.

StaticDocLab

Fast static analysis of the files you receive every day. An extra line of defense, no sandbox, on your own infrastructure.

HeaderGuard

The full email or just the header from your email client: comprehensive phishing analysis with threat intelligence integration and campaign-level correlation.

Grepster

Fast web server access log analysis: line-by-line streaming ingestion, pre-aggregated queries, visual trends and actionable insights.

> CUSTOM DEVELOPMENT

We take on custom work too.

When you need your own system rather than a ready-made tool, we build it and deliver it in containers.

Containerized delivery

We deliver our products and the systems we build as ready-made container packages.

> WHAT IT LOOKS LIKE

Real screens, not mockups.

One screen from each of the four products, exactly as it will run on your own server.

> DEPLOYMENT

Simple installation and setup.

Deploy

Docker Compose on your own server: pull, set up the .env file and start it. Running in under ten minutes.

License

Annual license key delivered securely. Access for your chosen user tier activates instantly.

Unlimited analysis

Run as many investigations as you like. The data stays on your own hardware, and we never see it.

// READY TO DEPLOY?

See what our tools can do.

Request a live demo, or tell us what you are protecting and we will help you pick the right tool.

Request a demo Products