Know where every system stands.
Infrastructure monitoring, centralized logs, security detection and incident response, connected in one operational view for managed service providers.
Sign inEvery signal has context.
Bring uptime, infrastructure metrics, syslog and security detections into one view, organized around the clients and systems you manage.
- Critical
- 0
- High
- 1
- Acknowledged
- 0
Illustrative
- A break in the line means no data
- Missing samples stay visible and are never drawn as a healthy stretch.
- Every mark has a shape and a word
- Severity never depends on telling two colours apart.
- The screen holds still
- Rows stay in order while you work an incident. Data moves, the layout does not.

Find the moment things changed.
Follow a system from healthy operation to its first deviation. Compare metrics, log events and detections on the same timeline, then open the events behind any point.
Measured values are set upright. Anything estimated is set in italic and labelled as a prediction, so a forecast never passes for a reading.
From detection to resolution.
Turn meaningful alerts into accountable incidents. Assign owners, preserve the evidence and keep a clear record of what happened and what was done.
Repeated failed sign-ins, then a success
41 failed, 1 success, 1 source, 6 minutes
Sequence rule, scoped to one client and one account
- SystemIncident opened from the firewall latency alert
- [email protected]Acknowledged and took ownership
- [email protected]Attached 41 matching sign-in events as evidence
- [email protected]Blocked the source address and resolved the incident

Built for managed environments.
Keep every customer distinct without losing sight of the whole operation. Organize monitoring by client, site and team, with access enforced in the database at every level.
- Harbour Dental Group
- Head office
- Northside clinic
- Calder Logistics
- Warehouse
- Distribution yard
Clarity for your customers.
Give clients a straightforward view of service health, ongoing incidents and resolution history, without exposing the complexity of your operations center.
What your team sees
What your client sees
Service affectedYour internet connection at the head office is down.
We saw it stop responding and we are working on it. You do not need to do anything.

Built to keep watch.
Three regions each run the full platform and replicate to one another. If one is lost, traffic moves to the next nearest and a new database leader takes over.
Working today
- Syslog over TLS with a client certificate per source, and HTTPS log ingest with a token
- Metrics from an OpenTelemetry agent, with an install config for each asset
- Service checks over HTTP, TCP, ICMP, DNS and TLS
- Threshold, sequence, absence and Sigma detection rules, with dry runs and versions
- Alerts, incidents with evidence export, and escalation over email, Teams, Slack, webhook and SMS
- Client portals with their own sign-in, service levels and downloadable reports
- OIDC single sign-on, two-factor sign-in, and client scoping enforced in the database
- An append-only audit record, legal hold, and client deletion that needs a second administrator
