FAQ

What is Agentic SOC?

An AI-powered Security Operations Center that monitor your infrastructure 24/7. Detects threats, generates alerts, provides auto-remediation, and includes an AI analyst you can chat with.

What systems can I monitor?

Any Linux server (Ubuntu, Debian, CentOS, RHEL, Kali, Fedora, Amazon Linux), plus integrations with Splunk, CrowdStrike, Wazuh, Graylog, Elastic Security, and custom tools via REST API.

What is included in the free tier?

10 days of full access: AI SOC analyst, real-time dashboard, up to 5 AI agents, email support, and up to 1,000 events. No credit card required.

How do I connect my tools?

Run the one-line install script on Linux servers, or send events via REST API from any tool that supports webhooks.

How do I connect my SIEM to Agentic SOC?

We support Splunk, Wazuh, and generic webhook. Go to your dashboard → Settings → API Keys to generate a key, then follow the integration guide for your tool.

Can I connect multiple tools?

Yes! Create separate API keys for each tool and they'll all feed into the same dashboard.

What happens if my API key is compromised?

Immediately disable the key in Settings → API Keys and generate a new one. All events from the old key will be rejected.

Do you support syslog?

Yes! Use our generic webhook with a syslog-to-JSON converter, or configure your syslog server to forward via HTTP.

Is there a limit on events?

Limits depend on your plan. Free tier: 1000 events. Monthly and above: 2000 events/month.

How much does it cost after trial?

Plans are starting from $199/month with 2 agents, 30-day retention*, custom playbooks, and priority support.

Alert & Agent Quota System

Upgrade (Free → Premium / Starter → Professional) Quota resets to full new plan capacity immediately Remaining alerts from old plan are not carried over Example: Starter (2,000 alerts) → Professional (10000 alerts) = You get 10,000 ⬇️ Downgrade (Premium → Free) Quota resets to Free tier limits 🔄 Renewal Quota resets to your plan's limit on each successful renewal payment *Unused alerts do not roll over