LogTriage

LogTriage is a managed-security web app that connects to the tools SMBs already use (Microsoft 365, Google Workspace, endpoints via lightweight agent, and common firewalls) and turns noisy security logs into a short, prioritized queue of incidents with clear next steps. It’s a hybrid AI + human service: AI clusters alerts, detects suspicious sequences (impossible travel, MFA fatigue patterns, new inbox rules, mass file downloads), and drafts remediation playbooks; a small analyst team reviews only the top-risk items and escalates when needed. The product focuses on “time-to-decision” for non-expert admins: one page per incident with evidence, impact estimate, and a one-click response checklist (disable user, revoke tokens, isolate device, block IP, create ticket). It also generates weekly executive summaries that are actually readable and maps actions to basic compliance needs (SOC 2-lite, cyber insurance questionnaires).

← Back to idea list