Products
Andromeda Stargazer for SIEMs
SIEMs are wonderful products. But their complexity can be overwhelming, and the number of alerts they generate can bury an SOC team. Stargazer provides a management console for SIEMs like Google Chronicle and Splunk, giving you a much more focused view of what problems really matter – and what to do about them.
Identify top targets or sources of threats
Filter alerts to ensure more signal, less noise
Prioritize threats with risk scores based on customizable criteria
Drill down to the packet level for details or fetch more information from the SIEM
Find recommended solutions using comprehensive playbooks
Generate reports for one-time or recurring use
Compare features →
See full feature list →
Andromeda Stargazer for SIEMs
SIEMs are wonderful products. But their complexity can be overwhelming, and the number of alerts they generate can bury an SOC team. Stargazer provides a management console for SIEMs like Google Chronicle and Splunk, giving you a much more focused view of what problems really matter – and what to do about them.
Identify top targets or sources of threats
Filter alerts to ensure more signal, less noise
Prioritize threats with risk scores based on customizable criteria
Drill down to the packet level for details or fetch more information from the SIEM
Find recommended solutions using comprehensive playbooks
Generate reports for one-time or recurring use
Compare features →
See full feature list →
Andromeda Stargazer with ML
For SIEMs and Shield
This product extends the capabilities of Stargazer for SIEMs by adding machine learning as well as Shield agents that are deployed on workstations and servers. Stargazer with ML thus provides a powerful management console for SIEMs like Google Chronicle and Splunk, but also an additional line of defense in the form of the Shield agents and a more sophisticated anomaly detection system using cloud-based ML.
Provides all the features of Stargazer for SIEMs
Provides all the features of Shield
Uses machine learning for behavioral analysis of security events impacting workstations and servers
Compare features →
See full feature list →
Andromeda Shield
No security system can claim to be effective without a view into endpoints and servers. With its agent-based solution for Windows, Mac OS and Linux workstations and servers, Andromeda Shield provides this security visibility, along with threat detection and remediation as well as integration with machine learning for behavioral analysis. With Shield, system admins, SOC analysts and even end-users of workstations all have complete visibility into the security status of these devices.
Detects ransomware and other malware
Identifies security policy violations such as accesses to blacklisted sites
Collects asset and configuration details to identify vulnerabilities
Integrates with Akitra’s ML, which learns the behavior of these devices to detect anomalies and generate alerts
Remediates threats by halting malicious processes, either automatically or manually
Compare features →
See full feature list →
Andromeda Advanced
Andromeda Advanced is Akitra’s most comprehensive security offering, designed to make SOC teams both more effective and more efficient. It is an ML-powered cybersecurity platform that provides quad-layer protection, to deliver the highest level of assurance that attacks and vulnerabilities will be detected. Covering the enterprise’s on-prem, remote and cloud assets, Andromeda Advanced addresses the whole security cycle. Beginning with asset discovery from endpoint agents, collectors, network infrastructure APIs and cloud services, Andromeda Advanced then learns the collective behavior of those assets. It then monitors threats, performs risk-scoring, generates alerts, provides threat analysis tools and finally enables remediation. All of Akitra’s Andromeda products are integrated into Andromeda Advanced. With a single, integrated Stargazer interface, users have full access to all the capabilities of Stargazer for SIEMs, Stargazer with ML, Shield and signature-based detection.
Compare features →
See full feature list →
Shield
Stargazer
Stargazer
Entry
Advanced
for SIEMs
ML for SIEMs
Scroll right →
ML based anomaly detection
Endpoint/server protection
Asset discovery for cloud
Asset discovery for on-prem
Advanced asset discovery for on-prem
Trouble-ticket integration
Shield
Stargazer
Stargazer
Entry
Advanced
for SIEMs
ML for SIEMs
ML based anomaly detection
Endpoint/server protection
Asset discovery for cloud
Asset discovery for on-prem
Advanced asset discovery for on-prem
Trouble-ticket integration
System requirements for each local collector VM
2
Network adapters
(SPAN port + network traffic)
Note: Andromeda Entry requires one local collector VM, while Andromeda Advanced requires two. Hardware with the above specs can be provided either by customer or by Akitra.
