Skip to main content
Back to products
Subscription

SignalDesk

An alert-handling desk: query the SIEM, triage with AI, and route each case to the person who should own it.

A 14-day trial licence, issued as soon as you sign in.

Overview

Alerts arrive faster than anyone can read them, and the cost is rarely the alert that was missed. It is the queue nobody trusts any more.

SignalDesk is where alerts land and get dealt with. It queries the SIEM directly, applies AI triage to decide what deserves a human, and at Professional assigns cases to owners so nobody has to play dispatcher. It sits on top of the SIEM you already run rather than replacing it.

The self-hosted Community edition is free and does not expire: one server, SIEM querying, no time limit. Paid editions add triage and assignment.

Capabilities

01

Query the SIEM from the desk

Run searches against your existing SIEM without switching tools, so the evidence for a decision sits next to the decision. Available in every edition, including the free Community one.

02

AI triage

Decides which alerts deserve a person and why, and shows its reasoning rather than a score. Enterprise.

03

Automatic assignment

Routes each case to an owner on the rules you set, so the queue stops needing a dispatcher and nothing sits unclaimed overnight. Enterprise.

04

Free self-hosted Community edition

One server, no expiry, no invoice. The same software as the paid editions with triage and assignment left out, suitable for a single team or a long evaluation.

Editions

Community

Free

Includes

  • Up to 5 active users, unlimited tickets and alerts
  • Full ticket lifecycle, templates, attachments, closing reports
  • Alert ingestion, deduplication, entity correlation, storm suppression
  • SLA rules, breach warnings and basic assignment
  • On-demand AI analysis and AI-drafted closing reports
  • 7 notification channels, knowledge base and playbooks
  • Two-factor auth, 6 built-in SOC roles, teams and groups
  • Dashboards, asset CMDB, API keys and multi-instance HA

What each edition includes

Capability
CapabilityCommunityNo licence · Free for goodEnterpriseUnlimited servers · 12-month term
PriceFreePricing on request
AI triageNot includedIncluded
AI guardrail (output caps, redaction, tenant quotas)Not includedIncluded
Automatic assignmentNot includedIncluded
Multi-level SLA escalationNot includedIncluded
Automation rules engineNot includedIncluded
Scheduled reports with email deliveryNot includedIncluded
Unlimited audit retention and exportNot includedIncluded
Single sign-on (SAML / OIDC / OAuth2 / LDAP)Not includedIncluded
SCIM user provisioningNot includedIncluded
Multi-tenancy for MSSP customersNot includedIncluded

Need Enterprise, or a deployment shape not in the table? Contact sales