SAQR · SOC AND SIEM
SAQR صقرA sovereign SIEM and XDR security operations centre on an open core.
SAQR brings detection, investigation and response together on Wazuh, running inside your own network. It can run in parallel with an existing SOC until your team is ready to switch.
WHAT SAQR DOES
SOC and SIEM.
On an open core.
- Agents on servers and endpoints, managed centrally
- Detection rules and compliance mapping
- Investigation dashboards on OpenSearch
- Fed by SAFI, so the SIEM indexes only what matters
- Response playbooks through ZIMAM
- Proof of concept, paid pilot, then a parallel run
Open-source core: Wazuh · OpenSearch. Delivered, handed over and supported by Alin Li, and able to carry your own product name.
PART OF ONE FAMILY
Works with the
rest of the estate.
Every product is managed from the Alin Li Platform Console and shares sign-in, audit and health.
ATHAR أثر
Endpoint log retention
An agent per device, a collector and an index. Every event kept, and restored on request.
Vector · OpenSearch
ZIMAM زمام
SOAR and automation
Playbooks that act on what the SIEM finds.
Shuffle
HARIS حارس
Secrets, keys and certificates
Every credential the estate uses, in one place.
InfisicalSTAY CURIOUS
See SAQR on a lab estate.
A short demo with an engineer, then a time-bounded proof of concept on your own data.