- technological advantage (ebpf + AI/LLM)
- lightweight, uses very less resouces than other heavy/bloated solutions
- seamless installation.
- highly customizable and fast shipping compared to existing solutions like splunk, wazuh, sentinel one etc.
- can create custom rules to raise alerts on any file, commands, uid, gid, port, ip etc.
- XDR: automated response/blocking of malicious ip/port.
