Show HN: Panther v1.0 – open-source, Cloud-Native SIEM

Show HN: Panther v1.0 – open-source, Cloud-Native SIEM
3 by jacknagz | 0 comments on Hacker News.
Hey HN, My name is Jack Naglieri. I’m the founder of Panther Labs - an SF-based cybersecurity startup funded by S28 & Innovation Endeavors. Prior to Panther, I was an engineering manager at Airbnb. Before that a security engineer/analyst/forensic analyst. Today, I’m excited to announce Panther v1.0, an open source, cloud-native SIEM: https://ift.tt/3akamns Panther is the culmination of our team’s experience building security tools at scale, including StreamAlert at Airbnb and critical internal monitoring systems at Amazon. Panther runs entirely on serverless to enable small teams to detect threats at scale. Our backend is Golang and our frontend is React/Typescript. Panther is also self-hosted and uses Python3 for flexible detections. At a high level: - Panther receives security logs - Panther baseline scans cloud infra and determines security posture - All data is saved to your data warehouse (powered by Athena/Glue/S3) - Alerts are dispatched to your team via Slack, PagerDuty, etc - Automatic remediations can also be applied to fix infrastructure Panther v1.0 includes support for: - Analyzing logs from AWS, OSS tools such as Osquery, OSSEC, Suricata, and more - Threat hunting on all your security data with standardized fields (IPs, domains, etc) - Real-time cloud configuration monitoring - 150+ built-in detections - A UI for creating, updating and tuning detections To get started: - Quick-start: https://ift.tt/2ybIrbf - Read our v1.0 announcement: https://ift.tt/2QMywPB - Register for our webinar tomorrow: https://ift.tt/2QLVIh0 You can also find us on Slack (https://ift.tt/2wFfofs), Twitter (@panther__labs), and Github (github.com/panther-labs/panther). We’re happy to answer your questions. Just drop a message here. Thanks! We also send our best wishes to those affected by COVID-19