Open-source core is free forever. Pay only for enterprise AI features and managed hosting.
Self-hosted open source. Full core platform.
Not included:
Managed cloud + IC3 threat modules + enterprise AI. For growing teams.
On-prem, hybrid, or dedicated cloud. Full IC3 coverage.
Your data, your infrastructure, your control. Always.
Everything on your hardware. 100% air-gapped.
FreeYour AWS, GCP, or Azure account. Your VPC.
All plansWe host it. You focus on risk.
Pro & EnterpriseDashboard in cloud. AI on-premises.
EnterpriseYes. The Community edition is Apache 2.0 licensed and free forever. You get the full core platform — signal ingestion, cross-domain fusion, evidence briefs, case management, all 7 AI skills, and audit logging. No artificial limitations.
Docker and 16GB RAM minimum. GPU is optional — you can run in cloud inference mode (using Claude/GPT API) without any GPU. For full on-prem AI, you need an NVIDIA RTX 4090 or better.
In self-hosted and on-prem Enterprise modes: never. In hybrid mode: only PII-stripped reasoning queries go to cloud APIs. In managed SaaS: data is in our secured infrastructure. You choose.
Absolutely. That's why we're open source. Your security team can verify every line that touches your data. Your regulator can inspect the evidence trail logic.
NVIDIA Nemotron-3-Super (120B, 12B active) for fast monitoring, and Nemotron-Cascade-2 (30B, 3B active, Gold Medal IMO) for deep reasoning. All open-weight models. In cloud mode, Claude or GPT. No vendor lock-in.
Days, not months. Unlike UEBA tools that need weeks of baselining, our reasoning models analyze patterns from day one. Connect your first data source and alerts start flowing.
Five new detection modules aligned to the FBI IC3 2025 Internet Crime Report: BEC Defense Suite (email analytics, vendor impersonation), Crypto Fraud Radar (Chainalysis/TRM Labs wallet scoring, pig butchering detection), AI Threat Intel Feed (AI-generated phishing detection), Ransomware Exposure Engine (MITRE ATT&CK TTP mapping, attack surface scoring), and Supply Chain Risk Monitor (SecurityScorecard vendor rating). These address the $20B+ in FBI-documented losses.
No. Professional and Enterprise plans include pre-integrated access to blockchain analytics via our API partnerships. For Enterprise clients with existing Chainalysis/TRM Labs licenses, we support direct integration with your existing accounts.