Eleven briefs, one per capability. Each describes the mechanism rather than the feature, states the figures measured from the shipping build, and says plainly where the product is blind.
File access auditing and NTFS permission monitoring for firms without a security team. See who has access to every shared folder, who actually touched it, what they changed, and where a file went — from one on-premises appliance.
The first question every security leader asks about AI in the security stack. Chronolith can act on endpoints. The AI inside it cannot — and that is a property of the architecture, not a setting somebody could switch on.
Cyber insurance renewals and compliance reports ask yes-or-no questions about your security controls. Most firms answer from memory. Chronolith grades every answer by the evidence behind it — and will not let itself claim more than it can show.
A question most SIEM vendors answer with a number. Here is the rule count, the technique coverage, how the rules get onto your appliance safely — and which of them your estate can actually run.
Most incident tooling closes a case when somebody ticks a box. Chronolith watches for the log events the fix should have produced — and marks the case verified only when it sees them.
Collection is the part of a SIEM deployment that actually fails. What installs, what happens when it is installed everywhere or twice, and how a collector that falls behind is stopped from losing data quietly.
A firm without an IT department does not need more alerts. It needs a short, calm list of things worth fixing this week — the credential nobody retired, the server that stopped reporting, the disk heading for a wall.
Certificate outages are almost always caused by the certificate nobody wrote down. Chronolith finds them by looking, tracks what is expiring, and — the part most tools skip — proves a replacement actually took effect.
Public and government feeds, matched against your own events, with a review workflow that stops a match being either ignored or over-read. Named sources, no mystery “proprietary intelligence”.
Most access-boundary detection ships somebody else's org chart as a rule and reports your firm for not matching it. Chronolith learns what your estate actually does, and tells you when that changes.
A security product holds a complete record of what everyone in the firm did. That is exactly as dangerous as it is useful — so deep access takes two people, every use is recorded, and the record itself is built to show if anyone edited it.