ZIMAM · SOAR AND AUTOMATION
ZIMAM زمامPlaybooks that act on what the SIEM finds.
ZIMAM is the orchestration and response layer. It takes alerts from SAQR and other tools, enriches them, opens cases and runs the playbook, so analysts spend their time deciding, not copying.
WHAT ZIMAM DOES
SOAR and automation.
On an open core.
- Alert enrichment and triage
- Case creation and routing
- Containment playbooks with approval steps
- Integrations with SIEM, ticketing and messaging
- Security workflows first, wider enterprise automation later
- Every run recorded for audit
Open-source core: Shuffle. Delivered, handed over and supported by Alin Li, and able to carry your own product name.
PART OF ONE FAMILY
Works with the
rest of the estate.
Every product is managed from the Alin Li Platform Console and shares sign-in, audit and health.
SAQR صقر
SOC and SIEM
A sovereign SIEM and XDR security operations centre on an open core.
Wazuh · OpenSearch
ATHAR أثر
Endpoint log retention
An agent per device, a collector and an index. Every event kept, and restored on request.
Vector · OpenSearch
HARIS حارس
Secrets, keys and certificates
Every credential the estate uses, in one place.
InfisicalSTAY CURIOUS
See ZIMAM on a lab estate.
A short demo with an engineer, then a time-bounded proof of concept on your own data.