One agent per server: intrusion detection, change monitoring, vulnerability scanning and automatic blocking.
UZS 47,900 per endpoint per month, excl. VAT
Alerts
Vulnerabilities
Illustration with sample data.
More than 3,000 rules mapped to MITRE ATT&CK: password guessing, suspicious processes, unusual sign-ins.
Changes to files, configurations and the registry, linked to the user and the process.
Installed software is checked against CVE databases and prioritised by severity.
Block an IP, end a process, send a notification by email, Telegram or webhook.
Ready-made PCI DSS and NIST dashboards. Reports for Central Bank requirements are coming soon.
Windows, Linux and macOS. About 50–100 MB of memory and under 2% of CPU.
Rules fire within seconds, and the response does not wait for an administrator.
| Time | Source | Event | Result |
|---|---|---|---|
| 11:39:58 | srv-1c-01 | A series of failed SSH sign-ins from 185.22.14.7 | Detected |
| 11:40:02 | Rule 5712 · T1110 | Password guessing: 46 attempts in 4 seconds | High |
| 11:40:02 | Automatic response | IP 185.22.14.7 blocked on the server firewall | Done |
| 11:40:03 | Telegram, email | Notification to the on-call administrator | Sent |
Visibility across hundreds of servers without an in-house SOC team.
Integrity monitoring and reports for PCI DSS and NIST audits.
Logs and the platform stay in data centres in Uzbekistan, with administrator actions under control.
Interface rows are examples with sample data.
We run the monitoring
No SOC of your own
We take on the rules, alerts and response to critical events.
Your team runs it
With our support
We deploy, configure the rules, train your team and stay on support.
UzCloud SIEM
UZS 47,900
per endpoint per month, excl. VAT · logs kept for 90 days
Corporate
On request
Plus a dedicated manager, priority support, architect consultations and an individual contract
Antivirus protects a single device from known threats. SIEM collects events from every server and detects attacks, anomalies and policy violations. The two work together.
In normal operation the agent uses about 50–100 MB of memory and under 2% of CPU. It is designed for production servers.
90 days in the plan. You can extend this to 180 or 365 days or set it to meet regulator requirements.
By the number of endpoints with the agent. Log volume for typical servers is already in the plan; terms for large volumes are fixed in the contract.
We will go through your infrastructure, show you the platform and calculate the cost.