Tenant Isolation
Your data stays yours.
Every client runs in its own tenant: its own encryption key, secrets, incident store, trail storage, investigation workers and access policy.
Client A
Incidents table
Trail storage
Watcher task
Access policy
Client B
Incidents table
Trail storage
Watcher task
Access policy
Client C
Incidents table
Trail storage
Watcher task
Access policy
No shared incident store · each trail must resolve to its own tenant's storage · viewers receive a scrubbed payload
01
Separate by default.
LIVE
Incidents, trails and secrets are stored per client and encrypted with per-client keys. A trail can only be read from its own client’s storage, and the code enforces it.
- Per-client keys and secrets
- Per-client incident and trail stores
- Point-in-time recovery on incident data
Client A
Incidents table
Trail storage
Watcher task
Access policy
Client B
Incidents table
Trail storage
Watcher task
Access policy
Client C
Incidents table
Trail storage
Watcher task
Access policy
No shared incident store · each trail must resolve to its own tenant's storage · viewers receive a scrubbed payload
02
One door, checked twice.
LIVE
Every console request passes identity-aware access at the edge, and the origin only accepts authenticated traffic from that edge. Viewers get a read-only, scrubbed payload; operator controls never reach their browser.
- Identity-aware access per client host
- Authenticated origin, web application firewall
- Read-only viewer role
03
Aggregate without mixing.
LIVE
MSP operators see every client in one view on a separate host. Client hosts only ever see their own data.
Open incidents12across 6 clients
MTTA · median7mmean of client medians
AI auto-triaged93%all clients
DetectionClientSeverityVerdict
Ransomware stagingClient AcriticalMalicious
Impossible travelClient CmediumBenign
OAuth token replayClient BhighNeeds approval
Data movement to personal cloudClient EhighNeeds human
Keep going
See it on your alerts
Bring us your backlog.
Thirty minutes, no slideware. Watch Irate work last week’s alerts on your own data.