Fundamentally Real Time

Fluency is the only SIEM that is fully compliant with Sigma, the open source standard in SIEM rules. Fluency can run all Sigma rules simultaneously without a performance hit. There is no conversion of rules, nor is there down selection. The rules analyze data as it enters the system, always creating real time alerts, meaning zero mean time to detection (MTTD). Fluency is even compatible to the proposed features of Sigma.

​

This means that your analysts benefit from the largest community of open source researchers for log analysis.

​

It doesn't stop with Sigma.

​

Fluency is the only pure real time SIEM. Fluency watches data as it is collected, while traditional SIEMs store data and then search a database to detect. Fluency maintains state and alerts immediately upon a match. Stateful detection allows for machine learning and historical correlation to improve the accuracy, therefore reducing noise and alert fatigue. 

A database query is a pitiful means of detection. Detection is a balancing act of matching knowledge to the event, while excluding matches that are wrong. Good security considers not just fields and values. Good security considers state, situational knowledge, environment, and history. There is more to quality detection than what can be placed in a database search.

Event Watch

mean time to detection is zero

EventWatch is what Snort would be if it reviewed audit logs. EventWatch does not search but watches data in real-time. EventWatch runs thousands of rules against your audit data as it streams into Fluency. Rules can be as Simple as a Sigma Rule or as complex as a stateful model. EventWatch alerts in real-time when an incoming event triggers a hit. There is no searching of a database or delays in running scheduled searches. All detection occurs when the rule triggers, just like you always wanted.

Before selecting Fluency, we tried:

• Splunk

• AlienVault

• Greylog

We selected Fluency because they easily integrated with our hardware and software, specifically M365 and our SD-WAN.

We were up and running in two days!

We've Come A Long Way

Fluency is consistently recognized for its unmatched power, efficiency, and cost savings. Winning multiple product awards from Cybersecurity Excellence Awards and Cyber Defense Magazine, as well as Stevie Awards for customer service excellence, Fluency stands as a true industry innovator.

Fluency is a full SaaS SIEM and includes EventWatch features. Our simplified offerings aim to provide clarity in cost. There are no up charges, upgrades, or add-ons. There are no surprises or hidden costs. Fluency's base offering retains data for 365 days, required for most standards. Fluency is not just certified secure, it supports your certifications too.

Full Year Searchable and Indexed Data Retention

Sigma and Behavioral Rule Base

(over 1500+ real time rules)

Streaming data analytics. Define an entry point and a streaming destination.

Discard selection to avoiding storing useless data.

Secondary correlation with debounce to remove repeatedly triggered events on same asset and group same asset alerts.

Real Time alerting of analytic rule sent to SIEM and/or notification system.

$2.69

Per Asset per Month

Minimum 50 Assets

Now and Then

Databases are designed to analyze historical data (after it has happened). If you use a database for security detection, you will always be late and the solution will not scale in a real time environment. Detection is the job of big data streaming analytics. A data lake is for database analytics as a data river is for streaming analytics. Fluency combines the two with EventWatch for Data River analytics and Fluency SIEM for Data Lake investigation.

EventWatch is Fluency's groundbreaking streaming analytics engine with the capacity to scale the volumes of a data river. This provides real-time detection and alerting based on full stateful models.  Doesn't it make sense to know when it's happening versus after the fact?

Fluency SIEM is based on an award-winning data lake. With dynamic allocation and processing, Fluency's SIEM provides the ability to search a full year of data with the precision of full-indexing and field-oriented regular expression.   All your data, is kept in a hot searchable S3 storage for 365 days, extending the value of your tools like EDR. 

Recent Posts

Strategic Partners