Axoflow has introduced AxoDetect, a new detection component currently in early access. The tool allows security teams to run Sigma rules directly within the data pipeline on normalized information before it reaches a SIEM. This approach enables alerts to be sent to the SIEM while storing full-fidelity logs in AxoLake, the company's low-cost security data lake.
The platform aims to reduce reliance on SIEMs for log management, positioning them instead as workflow engines. By processing data before ingestion, companies can significantly lower their SIEM expenses. Axoflow reports that a global industrial firm reduced SIEM costs by 50% and improved mean time to resolution by 85%, while a government agency cut data volume by 80%.
AxoDetect provides centralized visibility into data sources and detection coverage, addressing previous silos between data and detection teams. The system is designed to support the full detection lifecycle where data resides. Axoflow, founded by syslog-ng creator Balazs Scheidler, claims its autonomous security layer can deliver 10X faster investigations and 50% lower SIEM spending.
