Detections that get tuned, not ignored.
A curated library of more than 2,000 correlation rules and saved searches across 36 technologies, mapped to MITRE ATT&CK and kept honest by the verdicts Irate produces every day.
Coverage you can see.
The library spans endpoint, identity, cloud, network and SaaS sources. 1,413 entries carry an ATT&CK mapping, so coverage is something you can chart.
We curate from vendor and community content and from our own field work, and we say which is which.
- 1,438 correlation rules · 707 saved searches
- Microsoft, AWS, CrowdStrike, Okta, Google and more
- Every entry traceable to its source
Noise is handled by policy.
When a detection class keeps producing false positives, its triage floor moves, and the change is documented with the evidence that justified it. Noisy classes stay counted and filterable. Nothing is muted silently.
- Per-class severity floors
- Noise toggle in the queue
- Changes recorded with their reason
Coming next: hunts that graduate.
A hunt that keeps finding real activity becomes a scheduled detection; a detection that only makes noise becomes an on-demand hunt. We do this by hand today, and we are automating it.
Bring us your backlog.
Thirty minutes, no slideware. Watch Irate work last week’s alerts on your own data.