Where detection engineers build together.
Free for every detection engineer
Search tens of thousands of community detections and Intel Reports. Translate any rule across 9 languages. Draft new ones from your intel with AI. Sign up in 30 seconds.
What you get on day one.
Sign up, get to work. Everything here is included, no usage caps.
- Unlimited access to tens of thousands of community detections
- Save unlimited detections to your personal library
- Translate unlimited times across 9 detection languages
- AI detection generation with persistent chat history
- Subscribe to saved searches with email alerts
- Access community threat intel and Intel Reports
- Personal knowledge base, yours forever
Three things you do every day.
All free. All in one place.
Stay ahead of threats.
Tens of thousands of community detections and intel reports, searchable by threat actor, CVE, technique, or platform. Save the searches that matter and get notified the moment new content lands.
Find it. Borrow it. Make it yours.
Write once, use everywhere.
Paste a rule. Get KQL, SPL, YARA-L, S1QL, Cortex QL, Sigma, or any of 9 detection languages back.
Driven by foundational platform language understanding, not LLM guesses.
Intel to detections. Fast.
Paste an Intel Report, blog post, or threat actor profile. AI drafts the detection and refines the logic with you turn by turn.
Chat history persists, so you can pick up where you left off.
The library gets better every day.
Every detection someone publishes is one less you need to write. Every Intel Report adds context the community uses. Knowledge compounds with every engineer who joins.
Growing into a team?
Enterprise adds private team workspaces, SIEM deploy, AI Routines, coverage tracking, and SAML SSO. Your community profile and contributions follow you.
See EnterpriseSign up. Start building.
30 seconds to a personal library, an AI assistant, and 20,000+ detections to fork.