SIEM, XDR, EDR, native device management, network detection, automation and a licensed 24×7 SOC — with AEGIS AI governance and PDPA, Cyber Security Act 2024, ISO 27001 & SOC 2 compliance built in. Onboard an asset in minutes and watch it light up in real time.
Security today is a pile of disconnected products, an inbox full of alerts nobody reads, a compliance deadline you're not ready for, and a new category of AI risk with no owner. SOFTNET USP replaces that with one system of record.
Endpoint, cloud, identity and network telemetry live in separate silos, so multi-step attacks slip between them.
Critical alerts land in a dashboard at midnight and wait until morning. No chain, no phone call, no acknowledgement.
The Cyber Security Act 2024 and PDPA breach rules arrive, and your evidence is scattered across spreadsheets.
Ingest once, detect everywhere, respond safely. Raw evidence is committed with a content hash before any transform, normalised to OCSF, and searchable in our own query language.
Syslog/TLS, webhooks, cloud APIs and agents into one pipeline — raw-first, hashed, OCSF-normalised, instantly searchable.
Single, threshold, sequence and absence rules mapped to MITRE ATT&CK. Related signals correlate into prioritised cases with a full timeline.
One agent for Windows, Linux & macOS. Live process, network and logon telemetry with typed, signed, reversible response — isolate, quarantine, kill.
Desired-state device posture and policy without buying Intune. Runs alongside your existing AVG antivirus — no conflict, no rip-and-replace.
Firewall & flow telemetry from FortiGate, Palo Alto, Cisco, SonicWall and more — parsed to entities and correlated with endpoint and identity.
Plant decoy credentials, docs and URLs. Any touch is a high-confidence, near-zero-false-positive alert into the SOC.
Ingest and match indicators automatically, with confidence scoring and expiry — every event checked against known-bad.
Trigger typed playbooks on alerts — enrich, notify, contain — through the same approval, blast-limit and kill-switch guardrails.
Add a licensed SOC to any tier: monitoring, triage, hunting and DFIR, sold on measured MTTA / MTTR — under Act 854.
Every business now runs chatbots and copilots — and every one is an unguarded door. AEGIS inventories your AI, watches it for attacks in real time, and feeds what it finds straight into the SOC.
Register every AI tool; each is auto-scored for risk from its data exposure and reach, with approve/block governance.
Detects prompt injection, jailbreaks and data leakage in live interactions — mapped to MITRE ATLAS — and raises SOC alerts.
An adversarial suite probes your model's guardrails and scores them, with plain-English "what to do if it fails".
Turns the whole AI estate into a 0–100 risk index and an estimated exposure — so you can prioritise and report.
Compliance isn't a PDF you write once a year. USP maps the evidence it already collects to your controls, gives you a live readiness score, and explains every control in plain language — including what to do when something goes wrong.
Each control ships with "how to comply" + "what to do in case" — no consultant required.
When something serious fires, USP works down your responder chain — 1st, then 2nd, then 3rd — over the channels you choose. If no one acknowledges in time, it escalates automatically. Route different assets and severities to different people.
A guided setup walks a non-technical owner through it — and the console lights up green as each asset connects.
Protect a server or laptop with one line. Works on Windows, Linux and macOS, alongside your AV.
curl -fsSL …/install.sh | sudo bashTelemetry, logins, firewall and cloud events start flowing in seconds. The onboarding wizard turns green in real time.
Shipped detection content, cases and your escalation chain are on from minute one. Add the managed SOC when you want eyes on it 24×7.
Server-side tenant filters on every query path. Cross-tenant reads return zero rows — verified in CI.
Raw events committed immutably with hashes and lineage; an append-only, hash-chained audit trail proves integrity.
Destructive actions need two-person approval, blast limits and a per-tenant kill switch. Every command signed & expiring.
Tenant data never silently leaves its region. Dedicated Malaysia cells, PDPA and NACSA aligned.
OCSF, STIX/TAXII, Sigma, OpenAPI throughout, with full export and a certified-deletion exit path.
Provider → tenant → business-unit hierarchy with scoped, revocable delegation. Run many clients, mix none.
You pay for what actually drives cost — sustained event rate, retained volume, managed endpoints and seats. Move up a tier or add the managed SOC anytime.
Add Managed Detection & Response to any tier — a licensed 24×7 SOC with 15-minute MTTA on priority-1. Indicative packaging; final pricing is set against measured volume, retention and endpoint count.
Pilots run on a dedicated evaluation tenant with your sources, shipped detection content and a full case workflow. First asset connected the same day.