Your questions, answered briefly.

OrianaLOG focuses on log collection, time-stamped archiving, fast search, reporting and regulatory compliance; it performs one-shot correlation. OrianaSIEM adds six correlation engines, 3,500+ built-in rules, Sigma/YARA support, profiling-based UEBA, MITRE ATT&CK and threat intelligence. See the selection guide for a detailed comparison.

The interface is available in English, German, French and Turkish.

OrianaSIEM earned an A-Level Conformity Certificate in the SIEM tests conducted by TRTEST (Türkiye). This certificate is an independent indicator of the product's technical maturity, reliability and suitability for enterprise environments.

You decide: on-premises (your own data center), hybrid, Oriana cloud, a partner's cloud or an appliance. Data sovereignty is part of the product design; non-cloud deployments incur no data egress cost.

No. Profiling-based UEBA comes as standard. Entities are profiled by user, IP, MAC, hostname, process and any field in the log; insider threat and account takeover scenarios are caught without writing rules.

Rule-based (one-shot), time-based, count-based, event chain (Event Chain V1/V2), time delta (TimeDelta V1/V2), Sigma and YARA rule correlation, script-based and exception ("missing event") correlations; with multi-device and cross-source support.

Yes. MITRE ATT&CK tactics/techniques are synchronized via STIX/TAXII and multiple MITRE tags can be assigned to correlations. The USOM connector and CTI feeds (CISA, CERT-EU, NCSC, Abuse, Spamhaus) are updated daily.

E-mail (queue-based), SMS (multiple providers) and automatic SSH command execution on trigger. Cooldown, hourly caps, alert merging and grouping reduce alert fatigue.

No. The search screen works visually with operators such as equals / contains / greater-less / between / AND-OR / regex / CIDR; filter shortcuts and saved queries boost analyst productivity.

The OpenAPI 3.0-compliant REST API exposes 102 modules and 673 endpoints for authentication, device management, correlation, raw log queries, reports, archive and system settings. Details are on the documentation page.

No. Oriana is not a SOC service; it integrates with your existing SOC, SOAR and ticketing systems. Triggered events are forwarded via Web API, e-mail and SMS, enriched with GeoIP, threat intelligence and MITRE ATT&CK context.

Central log management, real-time analysis (average 0.95 ms response in internal tests), one-shot event correlation, customizable dashboards, reporting and alerting, compliance management, 50,000 EPS on a single server with cluster scaling, and a user-friendly interface.

Servers, storage units, fingerprint readers, antivirus, DLP, firewalls; plus IoT devices, switches and routers, access points. Via agent: Windows Event Log, Linux syslog, text/JSON/XML/CSV, HTTP/SNMP traps, SQL/ODBC/JDBC, Apache/Nginx/IIS, IDS/IPS, Windows binary and PCAP.

No. Logs are collected agentlessly via Syslog (UDP/TCP/TLS), NetFlow/sFlow, API, SFTP/SMB/FTP file sources and database connections. Where an agent is needed, OrianaAJAN collects Windows, file audit and application logs.

OrianaLOG has a correlation engine like traditional SIEMs; however, since it builds single-rule correlations, it is not a full SIEM. It detects events such as unauthorized file sharing, suspicious network traffic and unauthorized software installation at low cost. For full SIEM needs, migration to OrianaSIEM is possible.

Low cost / high performance, regular maintenance, fast updates and effective support; data tagging, the patented Minimize algorithm, deduplication (reducing disk usage by up to 70%) and zero-downtime updates with Docker/Kubernetes support.

Redis (BSD license) and RabbitMQ (MPL 2.0). The data engine and correlation infrastructure are developed in-house by Oriana; no Elasticsearch or Kibana required.

Any Linux environment with Docker; Ubuntu Server 22.04 / 24.04 LTS is recommended. It can be installed on VMware, Proxmox, KVM or physical servers.

It depends on EPS. For a POC, 8 Core / 16 GB RAM; a single server up to 5,000 EPS (16 Core / 32 GB / 4 TB SSD); above that, a Kubernetes cluster of at least 3 servers. Field reference for 20,000 EPS: 3 servers, 48 Core / 96 GB in total. The detailed table and calculator are on the technical specifications page.

Once the server is ready, single-server installation takes 1 day and multi-server installation 2-3 days (excluding source integration). The installation script sets up LVM, Docker and the product step by step.

A 1-2 week POC is run with your real log sources. Success criteria (query time, EPS capacity, resource consumption, deduplication ratio, report generation time, MTTD/MTTR scenarios) are defined together with you; results are reported in a format ready for the executive board.

Yes. Replica set / sharded cluster in the data tier, active-active collectors and a horizontally scaled correlation engine; a cold standby option for smaller environments. Talk to our team about an HA/DR topology for your environment.

Running in parallel with the existing SIEM is recommended: sources are redirected to Oriana in stages, historical records can be moved with log import, and the migration decision is made on comparative measurements.

The license is built on platform scope, retention period and use case, with no data-volume penalty; EPS is used for capacity planning. Monthly, annual and 3-year subscription options are available. Contact us for a quote.

After installation, send your system ID (UID) to [email protected]; your license file is generated and uploaded through the interface.

Manufacturer-direct support: the Oriana team is with you from installation to updates. Short resolution times under SLA, remote and on-site support, training seminars and materials; in Türkiye and internationally.

Zero-downtime version upgrades thanks to the container-based architecture; vendor-managed updates. In the MSSP model, an update is applied once and reflected to all customers.

Yes. Multi-tenant architecture; role management at page, button and action (add/delete/update/view) level; users see only the devices they are authorized for. Isolated data, rules, dashboards and reports per tenant; per-customer licensing.

Fill in the partner application form. In the first meeting, the target customer count, expected log volume, environment preference and price list are agreed; the Oriana team sets up the environment and opens the partner console. Details are on the partner program page.