ATHAR · ENDPOINT LOG RETENTION
ATHAR أثرAn agent per device, a collector and an index. Every event kept, and restored on request.
ATHAR keeps the trail. An agent on each device sends every event over TLS to a collector inside your network, where it is archived and indexed. Nothing leaves the network, and older data is restored when an investigation asks for it.
WHAT ATHAR DOES
Endpoint log retention.
On an open core.
- One agent per device, managed centrally
- TLS from device to collector
- Every event archived, in full
- Restore on request for investigations
- Health monitoring with OpenTelemetry
- Typical go-live in six weeks, then two weeks of hypercare
Open-source core: Vector · OpenSearch. Delivered, handed over and supported by Alin Li, and able to carry your own product name.
PART OF ONE FAMILY
Works with the
rest of the estate.
Every product is managed from the Alin Li Platform Console and shares sign-in, audit and health.
SAQR صقر
SOC and SIEM
A sovereign SIEM and XDR security operations centre on an open core.
Wazuh · OpenSearch
ZIMAM زمام
SOAR and automation
Playbooks that act on what the SIEM finds.
Shuffle
HARIS حارس
Secrets, keys and certificates
Every credential the estate uses, in one place.
InfisicalSTAY CURIOUS
See ATHAR on a lab estate.
A short demo with an engineer, then a time-bounded proof of concept on your own data.