Unify endpoint telemetry, security monitoring and AI-assisted operations. EUTA collects, detects and responds on every endpoint. Orbit AI Ops manages, analyses and operates across your whole estate.
The agent and the console are built to work together, and each is useful on its own. Start with the agent beside your current SIEM, then bring operations into Orbit when you are ready.
Collect / Detect / Respond
Endpoint Universal Telemetry Agent
A lightweight agent written in Go that replaces a stack of single-purpose collectors with one process per endpoint.
Manage / Analyse / Operate
Command · Control · Correlation
A multi-tenant console where SOC, NOC and IT Ops teams share logs, assets and incidents instead of copying them between tools.
Install EUTA with a package, a container image or a Kubernetes DaemonSet. Point it at your Orbit AI Ops or SIEM in one configuration file.
Collectors start streaming. Events are queued locally and forwarded to Orbit and your SIEM. Local detections run on the endpoint itself.
Teams triage alerts, track incidents, push configuration and trigger response actions from one console, with every action audited.
Technical notes
Watches critical paths and hashes every change, so a dropped web shell or edited config file raises an alert as it happens.
Blocks an IP, quarantines a file or stops a process on command. Every action is authenticated and logged.
Events are buffered on disk with AES-256-GCM encryption, so collection can continue through reboots and SIEM outages.
Periodic scans look for processes and files that hide from standard tools, and raise an incident on critical findings.
Security configuration checks based on CIS benchmarks, with findings sent to Orbit for triage.
Push new collection or response policy through the API. The agent applies it while running, without a restart.
Parse, retain and search logs across tenants, with a coverage view that shows which sources are reporting and which have gone quiet.
Run Orbit’s built-in detection rules, or keep Wazuh or Security Onion as the engine and operate it from Orbit.
Alerts become incidents with severity, owner and SLA. Analysts trigger agent response actions from the same screen.
Agent metrics, discovered assets, monitored services and SLOs sit beside security events, so one team sees one picture.
Ask questions in plain language and get suggested triage steps. Suggestions are validated before any action runs.
Tenant isolation, role-based access, MFA and an audit trail for providers that run many customers from one console.
Forward to more than one destination at once, and keep your existing detection content while you move operations into Orbit.
Endpoint telemetry, detections and response for an in-house SOC.
Many customers in one console with strict tenant isolation.
The same agent and policy for hosts, containers and clusters.
Assets, services and incidents beside the security picture.
We publish what we have verified, label what is planned, and make it easy to report a problem.
Orbit is designed to run on your premises or in your own cloud account.
Role-based access, MFA and a full audit trail for every response action.
Agent downloads will ship with SHA-256 checksums and signature verification steps.
Found a vulnerability? Tell us how to reproduce it and we will respond.
Pricing is based on endpoints and deployment model. Final list prices are being set; we will quote you directly in the meantime.
For a single team securing its own servers and workstations.
For organisations with SOC and IT Ops teams sharing one console.
Annual licensing, volume pricing, SSO and deployment support.
Multi-tenant licensing for providers serving many customers.
EUTA is the agent that runs on each endpoint. It collects telemetry, runs local detections and carries out response actions. Orbit AI Ops is the console. It manages your agents and brings logs, assets, alerts and incidents together for security, network and IT teams.
No. EUTA can forward events to the SIEM you already run while also sending them to Orbit. Orbit can use its own detection rules or work with Wazuh or Security Onion as the engine.
Orbit is designed to run on your premises or in your own cloud account, delivered as an installer that runs in a single container. Talk to us about your environment and we will confirm sizing and requirements.
EUTA runs on Linux and Windows, and in Docker and Kubernetes environments. Supported versions and architectures will be published with each release on the Downloads page.
Plans are being finalised for endpoint-based subscriptions, annual enterprise licences and managed service providers. Contact us for a quote based on your endpoint count and deployment model.
Yes. Book a live walkthrough and we will show EUTA and Orbit working on sample data, then discuss a trial in your environment.
A 30-minute walkthrough with our engineers, on sample data, focused on the endpoints and tools you run today.