SURIQ01
Plain-English explanations
A built-in assistant tells you what fired, why it matters, and what to check next, then drafts a fix for you to approve.
The Platform
From raw alerts to answers you can act on.
Suriq collects security events from every server you protect, groups the repeats into ranked incidents, and explains each one in plain English. It watches your public surface from the outside too. Fixes are proposed for your team to approve.
How it works
01
Install the agent
One command on each server, with a short-lived install token. The server shows up in the console as protected, and Suriq maps detection rules to the services it finds on it.
02
Suriq watches
Security events, file changes, logins, processes, network connections, and installed packages flow to a dedicated manager Suriq runs for your team, health-checked around the clock.
03
You get incidents, not noise
Repeat alerts fold into one incident, ranked by severity, tagged to MITRE ATT&CK, and sent to the channels your team uses: Slack, PagerDuty, email, and many more.
What you get
One console for the whole job.
02
Known vulnerabilities, ranked
Installed packages are matched against known CVEs, so you see which machines a flaw affects, most severe first. See vulnerability detection.
03
Changed files, checked against the vendor
File integrity monitoring compares changed system files with what your distribution or control panel actually shipped, so you chase the one file that matters.
04
Configuration checks
Hosts are scored against hardening benchmarks, and the assistant proposes the fix for each failed check, then verifies it after you apply it.
05
The outside, watched
Uptime, certificate expiry, DNS and WHOIS changes, blacklist listings, and BGP route hijacks with RPKI validation, checked from multiple locations. See Watchtower.
06
Snapshots and secrets
Scheduled server snapshots on the clouds you run with CloudSnap, and credentials kept in a vault you choose.
Control
You decide what changes.
Fixes wait for someone on your team to approve them. Automation is something you switch on: DNS failover for a host that drops, which can revert when the host recovers, and automatic approval of package fixes within limits you set.
A fix runs as a typed, checked package operation, never as free-form shell written by an AI. Incident changes are recorded with who made them.
What Suriq does not do.
- No human analyst desk. Detection and explanations run around the clock; your team makes the call.
- Not every operating system yet. The agent installs on Red Hat family Linux 8 and 9 today, with more on the way.
- No public pricing yet. Early access is open and pricing is being finalized.
FAQ
Frequently asked questions
What is the Suriq platform?
A managed security platform for the servers you run. It collects security events from each protected server, groups repeat alerts into ranked incidents, explains them in plain English, watches your public surface from outside, and proposes fixes for your team to approve, all from one console.
What detection engine does Suriq use?
Detection runs on the open-source Wazuh engine today, on a dedicated manager that Suriq provisions, health-checks, and runs for your team. You work from the Suriq console and never operate the engine yourself.
Does Suriq take actions on my systems automatically?
Only where you turn it on. Fixes are proposed and wait for approval by default. Automatic DNS failover and automatic approval of package fixes are opt-in settings, and every change runs as a typed, checked command, never as free-form shell.
Do I need to install an agent to use Suriq?
It depends on what you want covered. Uptime, DNS, certificate, and route monitoring and cloud snapshots are agentless. Detection, file integrity, and package vulnerability checks need a lightweight agent on each server, installed with one command.
Can I add my own detection rules?
Partly. Suriq maintains the managed detection rules and maps them to the services it finds on each host. You can write your own rules for file changes and host activity, and suppress or override Suriq's rules per host or across your team.
Which operating systems does the agent support?
Today the agent installs on the Red Hat family of Linux, versions 8 and 9: AlmaLinux, Rocky Linux, and CentOS. Support for more systems is being added; tell us what you run when you request access and we will say plainly whether it installs today.
See what Suriq finds on your own servers.
Tell us what you run, and we will walk you through it on your own machines.