The detection-engineering platform — ATT&CK coverage measured from the telemetry you actually have, detections authored as code and shipped to your SIEM through Git. It's running with design partners while our build focus sits on Talon Control, and it opens publicly when it's ready.
Talon Control is available today — the same self-hosted appliance discipline, shipping now.
ATT&CK coverage scored from the telemetry actually reaching your SIEM, not from a spreadsheet of rules you hope still fire.
Author once in Sigma, translate to Splunk SPL, Sentinel KQL, Elastic EQL and Chronicle YARA-L, and keep the source of truth in Git.
Every rule tested against real data and adversary emulation, so the ones that would never have fired are found before an incident finds them.
Deployment is a pull request against your detection repo, reviewed by a human, with the same propose-and-approve gate the whole Talon fleet runs under.
Studio's documentation, API reference and academy are offline while the product is parked. Design partners keep their access — everything comes back when the beta opens.