You look after the Windows servers and PCs, and security lands on you too. Arden watches the event logs, alerts you to attacker activity, and shows auditors which logging is in place. You don't need a security operations team or a cloud service to run it.
You look after 10 to 500 Windows machines and security is one job among many. Arden reads the event logs your machines already keep and tells you when something looks like an attack, such as a new administrator account, a run of failed logons or a cleared Security log, so you don't have to read the logs yourself.
You look after IT or security for several clients. You can run an Arden server at each client site and deploy agents from its dashboard, and each client's logs stay on that client's own server. MSPs can add alerts on attacker activity to the Windows support they already provide, and MSSPs can use Arden's alerts and audit-log coverage reports in their client reporting. Pricing will be a flat monthly rate based on the size of each environment, not on how much data it sends.
The HIPAA Security Rule requires audit controls on systems that hold patient data. Arden shows which Windows logging those controls depend on and whether it is turned on, and alerts on suspicious logons, without sending your logs to a cloud service.
CMMC Level 2 assessments check the NIST SP 800-171 audit and accountability requirements. Arden maps those requirements to the Windows events they rely on, shows where logging is missing, and runs entirely on your own network.
The FBI CJIS Security Policy requires audit logging on systems that handle criminal justice information. Arden reports which of that logging is in place, alerts on attacker activity, and has no cloud component for your agency to approve.
A small IT staff looks after a lot of machines and is responsible for protecting student records under FERPA. Arden alerts on common attacks such as stolen passwords and lateral movement, and shows what access logging is in place.
PCI DSS Requirement 10 and SOX IT general controls both call for logging of access and changes. Arden shows which of those Windows events are being recorded and alerts on suspicious activity on the machines involved.
Cloud tools aren't an option where you work. Arden doesn't need internet access: it runs on your own server, agents report only to that server, and there is no cloud service or telemetry.
Arden is in an invite-only beta, and each tester license runs for two weeks. Request an invite to try it on your own logs.
Request a Beta Invite →