On-premise daemon that receives logs from your whole infrastructure via standard protocol, stores them with full-text search and uses local AI to detect anomalies on privileged access and suspicious patterns. Live tail, smart alerts, configurable retention.