Almost ready to launch!
Detection and Visibility Insights
at your fingertips
Sirius Blue helps your organization to automate the mapping of defensive capabilities to the MITRE
ATT&CK® framework.
Providing you the insight to make
informed decisions
about your
security
investments
and efforts.
Detect, score and compare
with ease
Sirius Blue is a detection use case management system utilizing the MITRE ATT&CK and MaGMa frameworks. Connect Sirius Blue easily to your SIEM and EDR to ingest detection rules and log sources. Enrich and enhance this information with scores and administrate relevant use case information. Visualize detection and visibility coverage on the ATT&CK matrix. Get the information you need by advanced filtering options. See instantly where you need to improve your defensive capabilities.
-
Real time insights
- Gain real time insight into your defensive capabilities – both in terms of coverage and effectiveness.
-
Match capabilities
- Match your defensive capabilities against attacker Tactics Techniques and Procedures (TTPs) and purple teaming engagements.
-
Adaptability
- Easy configuration with plugins to automatically ingest data from your SOC tools like SIEMs and EDR solutions.
-
Drive your decision making
- Establish a strategic and prioritized approach for initiating cyber defense efforts.
-
Management insights
- Explore your coverage from multiple perspectives, track progress over time, and gain insights through a variety of statistical views.
-
Detection use case management
- Manage detection rules and use cases based on proven MITRE ATT&CK® and MaGMa standards.
-
Matrix dashboard. See the whole landscape at a glance.
-
Advanced filter options. Filter across attack groups. Create historic overviews or map your capabilities.
-
Configure plugins. Create own plugins or customize existing ones.
-
Create purple teams, mappings and rules.
Frequently asked questions
-
Sirius Blue is a new product made by the Sirius Security team. People from Sirius Security previously created DeTT&CT & Dettectinator.
-
Sirius Blue provides a Docker-based installation that can run on-premises or in your own (private) cloud. This means you are the owner of your data.
-
Sirius Blue is almost ready to launch. Expected launch date is Q1 '26.
We are currently working together with a few launching customers to make sure we provide the best quality. Want to join? Get in contact with us! Contact us