The SOFTNET Unified Security Platform (USP) is our own multitenant security operations platform — SIEM, XDR, endpoint and network detection, native device management, automation and a licensed 24×7 managed SOC. Now with AEGIS AI governance and built-in PDPA, Cyber Security Act 2024, ISO 27001 & SOC 2 compliance. Strict tenant isolation, Malaysia data residency, and self-service onboarding in minutes.
INGEST · DETECT · RESPOND
Ingest logs over Syslog/TLS, OTLP, webhooks and cloud APIs. Raw evidence is committed with a content hash before any transform, normalised to OCSF, and searchable in our own query language.
Streaming, threshold and sequence rules mapped to MITRE ATT&CK, versioned and ring-deployed. Related signals correlate into prioritised cases with a full evidence timeline.
One self-contained agent for Windows, Linux and macOS — live process, network and logon telemetry with typed, signed, reversible response. Runs alongside your existing AVG antivirus; no rip-and-replace.
Desired-state device posture and policy — no Intune required. One management authority per device, ownership-gated wipe, and compliance driven by real endpoint posture.
Passive sensors and flow logs resolved to entities and correlated with endpoint and identity evidence. Metadata-first, with tightly governed packet retention.
Optional 24×7 monitoring, threat hunting and DFIR, staffed separately and licensed under Act 854. Sold on measurable MTTA / MTTR outcomes.
Server-side tenant filters are injected on every query path. Cross-tenant reads return zero rows — verified in CI and by independent testing before each release.
Raw events are committed immutably with hashes and full lineage; an append-only, hash-chained audit trail proves the platform's own integrity.
Destructive actions require two-person approval, blast-radius limits and a per-tenant kill switch. Nothing touches a device without a signed, expiring command.
Tenant data never silently leaves its region. Built to PDPA 2010 (2024 amendments), with RMiT support packs and dedicated Malaysia cells.
Open standards throughout — OCSF, STIX/TAXII, Sigma, OpenAPI — with full export in JSON, CSV and Parquet and a certified-deletion exit path.
Provider, tenant and business-unit hierarchy with scoped, revocable cross-tenant delegation — run many clients from one console without ever mixing their data.
Every business now runs chatbots and copilots — and every one is an unguarded door. AEGIS inventories your AI, watches it for attacks in real time, and feeds what it finds straight into the SOC.
Register every AI tool your business uses. Each is auto-scored for risk from its data exposure and reach, with approve / block governance and an owner.
Detects prompt injection, jailbreaks and data leakage in live interactions — mapped to MITRE ATLAS — and raises alerts in the same SOC pipeline as everything else.
An adversarial suite probes your model's guardrails and scores them, each test explained in plain English with "what to do if it fails".
Turns your whole AI estate into a 0–100 risk index and an estimated exposure — so AI risk becomes a number you can prioritise and report to the board.
Compliance isn't a PDF you write once a year. USP maps the evidence it already collects to your controls, gives you a live readiness score, and explains every control in plain language — including what to do when something goes wrong.
The seven principles plus the 2024 amendments — 72-hour breach notification, Data Protection Officer and data portability — each with step-by-step guidance.
The obligations for National Critical Information Infrastructure entities: registration, periodic risk assessment, annual audit and incident notification.
All 93 Annex A controls with a one-click AI assessment that pre-fills what the platform already satisfies, plus a Statement of Applicability export.
The full Common Criteria and TSC categories, tracked alongside ISO 27001 in one console with a shared risk register and evidence trail.
When something serious fires, USP works down your responder chain over the channels you choose — email, WhatsApp and phone call. If no one acknowledges in time, it escalates automatically. Route different assets and severities to different people.
Your on-call is alerted the moment a critical fires, on their chosen channels. A phone call reads the alert aloud and takes a press-to-acknowledge.
Not acknowledged within your window? The second responder is paged, on the record — no alert is ever left sitting in a dashboard overnight.
Route "firewall criticals → the network lead" and "AEGIS AI risks → the AI owner". Each asset and severity maps to its own who-to-call chain.
A guided setup walks a non-technical owner through it — and the console lights up green as each asset connects.
Protect a server or laptop with a single copy-paste command on Windows, Linux or macOS. Point a firewall's logs at us, or connect Microsoft 365 in a few clicks.
Telemetry, logins, firewall and cloud events flow within seconds. The onboarding wizard turns each step green in real time — no waiting, no guesswork.
Shipped detection content, cases and your escalation chain are live immediately. Add the managed SOC whenever you want eyes on it 24×7.
Subscriptions meter what actually drives cost — sustained event rate, retained volume, managed endpoints and analyst seats. Move up a tier, or add the managed SOC, at any time.
Up to 2,500 EPS on a pooled cell · 90-day hot search, 13-month archive · cloud & identity connectors · shipped detection content · cases, dashboards & reporting.
Up to 10,000 EPS · everything in Essentials, plus the EDR agent, unified endpoint & mobile management, SOAR playbooks, threat intelligence and full API access.
25,000+ EPS · dedicated or Malaysia-resident cell · customer-managed keys · NDR & deception · RMiT support pack · custom retention up to 7 years.
Add a licensed 24×7 SOC to any tier: monitoring, triage, proactive hunting and a DFIR retainer, with a 15-minute MTTA for priority-1 alerts.
Indicative packaging. Final pricing is set per workload against measured event volume, retention and endpoint count.
Pilot programmes run on a dedicated evaluation tenant with your sources, shipped detection content and a full case workflow. Talk to us about scope and timelines.
Request a pilot →