ComingUp
About
Spent the last several months building XCloak — a self-hosted platform that combines network detection, log monitoring (SIEM), an endpoint agent (EDR), and automated response (SOAR) into one Go backend instead of stitching together separate tools for each. Highlights: - 24 behavioral detectors mapped to MITRE ATT&CK - Sigma-compatible rules engine, seeded with 43 rules across 12 tactics - Cross-platform Go agent (Linux/Windows), with an eBPF-based real-time connection collector on Linux - Pl...
Comments (5)
who actually wants to self host their own EDR and SIEM stack
combining SIEM EDR SOAR and network detection in one go service is ambitious
one go binary handling all four of those seems ambitious, whats the resource overhead like
packing siem edr and soar into one go binary, how's ram usage
ambitious. what does the correlation architecture across all four domains look like?
Related Products
Ad Blocker
FormCrab.com
Get messages while you hide your email
SteelSuit
External web security scanner: TLS, headers, secrets & CVEs
MyVault — Personal Command Center
All-in-one personal vault for passwords, files, bills, and expenses.
Suraxon Parental Control & Android Monitoring App
Production-ready parental control and device monitoring platform
xpenser
xpenser - self-hostable personal finance tracker with MCP access