Runs where you need it
Each product in the ARRTECH Security Suite runs on infrastructure you choose, including your own servers. One Management Agent installs first and manages every product agent, so each product you add joins the same console instead of a new admin stack. Your logs stay on servers you run.
Built to fit your estate
ARRTECH SIEM runs on servers you run, and its components can sit on separate servers with load balancing and failover. You scale out by adding servers.
ARRTECH SOAR runs on your servers, on one machine or distributed across several. Every playbook can be tested on sample data and switched on only when your team is ready.
ARRTECH DLP runs on your own infrastructure and supports multi-tenant service providers. Endpoint agents install remotely, and email and network protection work without an agent, so coverage does not wait on every device.
Cyberdroid AI Detection, in the AI layer of the ARRTECH Security Suite, installs beside your SIEM without specialized hardware. It reads the export of ARRTECH SIEM, or of a third-party SIEM with a supported export format, read-only.
A Management Agent installs first, then installs, updates and configures every product agent centrally. Content for all three products installs from one console, so your team runs one process, not three.
Cyberdroid AI Investigation, in early access with AI Detection, runs on models served in your environment. Inference stays local by default, any online fallback is a policy your team sets, and AI Detection never blocks or changes anything.
Answers before you commit
An architecture review asks these questions after the servers.
Licensing
Each product is licensed on a basis that follows how you use it. ARRTECH SIEM places no limit on log sources or agents, so coverage decisions stay about security, not cost.
Sizing
Sizing is agreed per deployment, and a proof of value measures what Cyberdroid AI Detection uses on your own telemetry before you commit.
Storage
ARRTECH SIEM compresses what it stores and sets retention per source. Archives and backups run on a schedule, and archived logs stay searchable, so older records stay within reach.
Console
One web console manages SIEM, SOAR and DLP in many languages. Each tenant keeps its own users, data and policies, and sign-in works with your existing directory.
Agents
Agents cover the common server and desktop operating systems, and the Management Agent keeps them installed, updated and running.
Offline
The suite runs on premises, including at disconnected sites. Agents hold logs through an outage and forward them when the link returns.
