# See what your SOC can see.

URL: https://avispa.ai/orbitsoc/visibility/

Avispa OrbitSOC

AI multiplies a SOC that has good telemetry and content. With poor visibility, it’s wasted spend.

Discovery: what works here

- **Integration** · Works
- **Alert intake** · Works
- **Searching** · Partly works · Your step Give the search role read access to the proxy index
- **Threat intel** · Works
- **Threat hunt** · Partly works · Our step We map your proxy fields for hunts
- **Observability** · Works
- **Threat radar** · Not working · Your step Forward your cloud audit logs
- **Detection** · Works
- **SOC chat** · Not checked

Each fix is tagged your step or ours.

## Unknown is never clean.

Estate health

Log sources

- Windows security · *Flowing*
- Sysmon · *Flowing*
- Entra ID sign-ins · *Flowing*
- Proxy · *Gap, 6 h*
- Cloud audit · *Unknown, not clean*

Connectors

- CrowdStrike Falcon · *Healthy*
- Splunk · *Healthy*
- Microsoft Entra ID · *Healthy*
- Okta · *Not connected*

EDR coverage

- Windows · *96%*
- macOS · *88%*
- Linux · *71%*

AI tool calls

- **Tool calls today**: 3,412

- **Failed**: 0.4%

Log sources, connectors, EDR coverage and the AI’s own tool calls.

## The Observatory grades the AI.

Observatory

Human agreement · **92%**

Escalation precision · **81%**

No-verdict rate · **6%**

Resolution stream

1. Ingested · **1,284**
2. Investigated · **1,190**
3. Closed or suppressed · **1,121**
4. Escalated · **41**
5. Analyst verdicts · **41**

AI spend this month

**$412** · Shown in the open

How often people agree with it, how precise its escalations are, and what it spends.

## People hold the decisions.

- The AI recommends. Only a person declares an incident.
- Stated confidence never exceeds 85%.
- Eight model provider families, your own keys, strict routing, revoke-and-freeze.
- A hash-chained audit log, and row-level security between organizations.
- OrbitSOC does not mirror your log platform.
- Response guidance, plus guarded actions: contain a host or disable an account, each once a SOC lead confirms. For AI agents, OrbitSOC pauses an agent on its own when your rules say so.

**More: the stack it works with**

## Works with the stack you run.

- **EDR and XDR**: CrowdStrike Falcon · Microsoft Defender for Endpoint · Microsoft Defender XDR · SentinelOne Singularity · VMware Carbon Black Cloud · Cisco Secure Endpoint · Trend Micro Vision One · LimaCharlie

- **SIEM and log**: Splunk Enterprise and Cloud · Microsoft Sentinel · Elastic Security · Sumo Logic · Datadog · Google SecOps · Falcon LogScale · Wazuh · Fortinet · Cribl Stream and Cribl Search

- **Identity**: Microsoft Entra ID · Okta

- **Cloud**: AWS Security Hub

- **Workflow**: Slack · ServiceNow

Need one? Ask. Most new OrbitSOC integrations land in a week or two once a customer asks.

## See where your telemetry stands, on the demo.

[Book a demo](https://avispa.ai/book-a-demo/) · [See a live investigation · (opens orbitsoc.com)](https://www.orbitsoc.com/investigation-storyline?view=storyline)