Threat Hunting Console

Proactive Defense

IOC Scanning

Paste IPs, domains, URLs or hashes (MD5/SHA1/SHA256). Scan ClickHouse canonical_events for matches.

IP/Domain/HashClickHouse

Relationship Graph

Trace event chains through IP/domain/process relationships with BFS depth control (max 5).

Canvas SVGForce-directed

Wildcard Expansion

Resolve patterns like 10.0.1.* against 7-day ClickHouse data with regex matching.

Pattern7-day scan

MITRE ATT&CK Mapping

Search events matching T-code patterns (T1003, T1059, T1550).

ATT&CKT-code

Time-Range Analysis

Full event search with severity/category/server/service filters and severity chips.

DatetimeFilters

Export & Share

Export hunt results as CSV/JSON and copy IOCs for firewall rules or playbooks.

CSVJSONSOAR

By the Numbers

SYNOTI in Production

0

Background Services

auto-restart · Docker

0

Prometheus Exporters

real-time metrics

0%

Self-Heal Rate

~90% auto-recovered

0

Endpoints Benchmark

100 GB/day

Trusted by Operators

What Teams Say

SYNOTI cut our MTTR from hours to under a minute for routine failures — the self-healing engine resolves most issues before my team even sees a ticket.

Operations Director

Financial Services

Air-gap readiness was the deciding factor. All 33 services run on our hardware with zero egress — exactly what our compliance team required.

Chief Information Security Officer

Government Sector

From Telegram ChatOps approvals to AI root-cause analysis, the platform fits how our SREs already work. Deployment took less than 15 minutes.

SRE Lead

Telecommunications

FAQ

Common Questions

IPs, domains, URLs and hashes (MD5/SHA1/SHA256) across ClickHouse canonical_events, with wildcard expansion and MITRE T-code search.

Yes — an interactive canvas traces event chains through IP/domain/process relationships with BFS depth control.

Export hunts as CSV/JSON or copy IOCs straight into firewall rules or SOAR playbooks.

Enterprise Ready

Air-Gap ReadyZero TelemetryWazuh 4.x XDRMITRE ATT&CK15 SOAR Actions230+ REST APIs5 RBAC RolesMTTR < 60s

Process Flows

How It Works

End-to-end pipeline diagrams from the SYNOTI engine.