Skip to main content

Future Improvements

The current platform already covers collection, detection, correlation, cloud processing, and AI-assisted triage. The next step is to deepen the quality of each layer without losing operational simplicity.

Detection improvements​

  • Expand rule coverage for more endpoint behaviors
  • Add richer exclusions and suppression controls
  • Introduce stronger testing and replay workflows for new rules

Correlation improvements​

  • Correlate at the device level across multiple alerts
  • Add longer-running activity tracking across sessions
  • Improve entity linking for files, users, and destinations

AI improvements​

  • Add analyst feedback loops for summary quality review
  • Improve evidence citation in generated responses
  • Support stronger confidence handling and uncertainty display
  • Expand the retrieval corpus with curated response guidance

Platform improvements​

  • Add richer observability and health reporting
  • Improve multi-tenant administration workflows
  • Introduce asynchronous pipelines for heavier AI workloads
  • Add more export and reporting options in the dashboard

Endpoint improvements​

  • Expand event coverage where telemetry quality supports it
  • Improve local buffering and offline resilience
  • Add more detailed agent health diagnostics