How Squirks works
Squirks learns what normal looks like in your own data, then shows you the few things that do not fit. Here is the idea in five short parts.
- Watch everything, not just what you can afford
- Put the strangest things first
- Nobody has to describe normal
- Any data, as it is
- Spend your people on decisions
01
Watch everything, not just what you can afford
Most security tools charge by how much data you send them. So teams send less: they turn logging down, skip some systems, and hope trouble does not happen in the parts nobody is watching. Whatever gets cut can never be caught.
Squirks is not priced by how much data you keep. Its cost follows the work of learning and scoring, so it makes sense to put more of your systems under watch, not fewer.
02
Put the strangest things first
Your systems produce far more events than anyone can read. Most tools list them in the order they happened. That tells you what came next, not what matters.
Squirks ranks every event by how far it sits from normal. The strangest things rise to the top of a short list, and your people only read what deserves a person.
03
Nobody has to describe normal
Squirks learns normal from your own data. Nobody writes rules, buys lists of known threats, or tries to guess what attackers will do next. You point Squirks at your data, and it learns.
What it learns is the baseline: a mathematical picture of your normal. Every new event is measured against it. When many events look alike, Squirks groups them into one line, so a flood of lookalikes does not become a thousand rows to sift by hand.
04
Any data, as it is
Squirks reads raw bytes, so it works on almost any data: logs, network records, messages, and output from factory equipment or appliances that no other tool understands. Nobody has to explain the format first or split it into fields.
If data has a normal shape, Squirks can learn it. Truly encrypted data looks random, so there is little to learn from it, and we will tell you so rather than pretend.
05
Spend your people on decisions
The valuable moment in security is when someone reads a short list and decides what to do. Everything before that is just choosing what goes on the list. Most budgets go into the choosing: storing everything, writing rules, tuning them.
Squirks does the choosing with math, so your people, and the tools you already own, spend their time on decisions. It does not replace the tools that protect individual computers or manage accounts. It replaces the expensive, hand-built part that decides what gets looked at.
See it on real data
An automated attack on our own gateway, walked through from the raw line to the decision. Or, if you want the numbers, see how the score works.