Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional
Axoflow's AxoDetect enters early access, executing Sigma rules in-stream so only alerts reach the SIEM while full-fidelity logs land in the AxoLake data lake.
Axoflow released AxoDetect in early access, announced at Splunk .conf26, which runs customer Sigma detection rules in-stream on normalized security data before SIEM ingestion. Alerts travel to the SIEM while full-fidelity logs land in AxoLake, the company's low-cost security data lake that also runs on-premises. Vendor-cited outcomes include 50% lower SIEM spend and 85% faster resolution at an industrial company, and 80% data volume reduction at a government agency.
- Runs Sigma rules in pipeline before SIEM ingest; alerts, not raw logs, reach the SIEM
- Full-fidelity logs land in AxoLake, an on-prem-capable low-cost security data lake
- Reported outcomes: 50% lower SIEM spend and 80-85% data volume and footprint reductions
- Early access announced during Splunk .conf26
- Organizations
- Axoflow
From the original article
2 min read at cybersecuritynews.com
Stamford, CT, September 16th, 2026, CyberNewswire Now in early access, AxoDetect runs Sigma rules in stream alerts travel to the SIEM, and full-fidelity logs land in AxoLake, a low-cost security data lake Detection engineers do not need more detections. They need their existing detections to fire earlier, on cleaner data, without paying SIEM ingest rates […]
By Cybernewswire · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.