Learn & Share

Following from our announcement re DPM Flex Consumption, our mechanism to all our customers to optimize their data ingestion for effectiveness, efficiency and efficacy - here’s a sneak preview of the billing dashboard that is expected to ship in the December platform update.  You’ll be able to see both total consumption in absolute GB/d, and also billed consumption in terms of the weighted “cost” of each pipeline, giving you visibility of how your DPM effectiveness changes over time and plenty of warning if you are approaching your committed limit.  More information to come and always happy to answer questions.   

For all our customers who participated in the Search Agent Early Access that ends Dec 31 2025 -  I’d like to extend my sincere thanks for your participation in the Search Agent Early Adopter Program over the past ten months. Your engagement and thoughtful feedback have been instrumental in shaping this capability - helping us deliver three progressive releases, the most recent in September R1 2025.Your input has driven tangible improvements in accuracy, performance, and user experience, transforming the original concept into a robust and intuitive feature.As we prepare to close the Early Adopter phase in December 2025 and transition Search Agent to general availability, we’d greatly value your final feedback to help us fine-tune the GA experience.Please take a few minutes to share your perspective by answering the brief questions below - we are happy to talk through your experience if you’d rather discuss: Does your team use the Search Agent on a regular basis? If not, what are the mai

Almost all Securonix SIEM customers are now enabled for Security Alert Center, and with it (as long as you have approved AI components) the Response Agent - have you tried it yet? Any feedback welcome. We estimate it averages about 20min time saved per violation - do you agree?   

You can find the tile to access TQ Marketplace on the main page. Or use this link: https://marketplace.threatq.com/

Why Network Visibility MattersMany security teams rely on Proxy and Web Application Firewall (WAF) logs for visibility, but that’s only part of the picture.🛡️ Firewalls, especially their allowed traffic logs, reveal critical activity that other tools can’t see.🔍 They’re essential for detecting, investigating, and preventing threats across the entire attack lifecycle, from the first probe to the final exfiltration attempt. ✨ Where to StartTo unlock this visibility and close detection gaps, focus on the following six best practices.We’ll begin with the foundation: capturing Layer 3/4 network visibility. 🌐 1. Capture Layer 3/4 Network Visibility What to do Ingest allowed firewall traffic (not just HTTP/S) across all protocols and east-west flows. Keep this data in your SIEM so analysts can query across users, hosts, apps, and segments.  Why it matters Provides foundational L3/L4 visibility and fills gaps left by Proxy/WAF. Eliminates blind spots in non-web communications and unmana