All Security Stack Compositions
SIEM · Composes with

//AIRGAPT + Splunk

Splunk aggregates, correlates, and alerts on telemetry across your environment. //AIRGAPT composes with Splunk, returning a FIDO2-signed, attributable evidence record for each containment action triggered from a Splunk alert, so the audit trail shows what happened and who authorised it.

Splunk
Log aggregation & search across all data sources
Real-time threat correlation & SIEM alerting
Security analytics & threat hunting dashboards
Compliance reporting & audit log storage
//AIRGAPT
FIDO2-signed, attributable evidence for each containment action
Hardware-anchored proof of human consent per triggered response
Webhook returning signed receipts the SIEM ingests
Composes with the SIEM without replacing it
Capability Matrix

Where each layer begins and ends

Capability
Splunk
//AIRGAPT
Aggregate & correlate security telemetry
Not our role
Generate alerts & offenses for SOC analysts
Not our role
Store compliance-grade audit logs
Not our role
Sign each containment action with the operator's FIDO2 key
Not our role
Hardware-anchored proof of human consent per triggered response
Not our role
Return signed, attributable receipts the SIEM ingests
Not our role
Compose with the SIEM without replacing it
Not our role
Better Together

"Splunk detects and alerts. //AIRGAPT signs each triggered containment action with the operator's FIDO2 key and returns the receipt to Splunk, so the audit record reads provable evidence, not just an alert that fired."

More SIEM Compositions
+ Microsoft Sentinel
SIEM
+ IBM QRadar
SIEM

Add //AIRGAPT to your Splunk deployment

Zero new hardware. MSI deployment via your existing MDM. Works alongside Splunk without replacing any existing workflow.

Apply for PilotAll Compositions
Vanguard Pilot · Now Accepting Applications
Pilot Company Waitlist Open, Setup Fees Waived for Founding Cohort
Request Access