Skip to content

Features

Everything an office needs to see and respond

The dashboard, alerts and notifications are in Albanian and English.

From event to response, in one dashboard

Search and dashboards

  • The RQL query language

    Search events, alerts and the Audit log with filters and commands.

  • Scheduled alerts

    Save a search and get an alert when its results meet the condition.

  • Chart dashboards

    Four ready-made dashboards that you can change and share.

Laptops

  • Agent for macOS, Windows and Linux

    Sends the security events and the security posture of every laptop.

  • Configuration assessment

    26 checks, such as FileVault, BitLocker and the firewall, with a score from 0 to 100.

  • IT hygiene

    An inventory of every laptop: system, hardware and open ports.

  • Commands from the dashboard

    Check the configuration, refresh the inventory or restart the agent.

Detection

  • 111 rules mapped to MITRE ATT&CK

    Rules covering 71 techniques; turn them on or off from the dashboard.

  • Your own rules

    Write them in YAML and test them against stored events.

  • Threat indicators

    Add your own indicator lists and get an alert on every match.

  • Ransomware isolation

    The laptop is cut off from the network when ransomware is detected.

Response

  • Incident review

    Every alert has its own severity, owner and status.

  • Notifications where you work

    Slack, Teams, Discord, Telegram, email or webhook.

  • Reports for management

    PDF reports for the company’s managers.

How it works

Three parts: agents, network devices and the dashboard

Agents and network devices send events to your Wardline instance through an encrypted tunnel.

  1. Your office

    Laptops with the agent, the router, the firewall and the NAS. The agent runs on macOS, Windows and Linux, with one install command per laptop.

  2. WireGuard tunnel

    The router opens a WireGuard tunnel to your instance. We give you the configuration for MikroTik, or a WireGuard file.

  3. Your Wardline

    On a remote server. Network devices send their logs over syslog, for example OPNsense, MikroTik, Pi-hole and Synology.

  4. Dashboard in the browser

    Opens over HTTPS on your own subdomain, with two-step verification, and notifications arrive right away in Slack, Teams or Discord.

What you need

  • Router

    With WireGuard, or MikroTik with RouterOS 7.

  • Laptops

    With macOS, Windows or Linux.

  • BYOD policy

    Signed by employees, when the laptops are their own.

Secure your system

Registration opens soon

Write to us and we will show you how your office connects to Wardline.