AI-generated Blueprint remediation runbooks per alert
Windows Event Forwarding, FortiGate, M365, Entra ID, VMware, iLO connectors
Post-Incident Report generator
Insurance Renewal Pack (one-click underwriter-ready output) —
see a sample
Sector-aware compliance guidance across 10 sectors (HIPAA, GLBA, DFARS, NERC CIP and more)
Automated certificate lifecycle management — ADCS integration, configurable renewal cadence
Open, community-reviewed detection rule library — GitHub-based, PR workflow
Native cross-platform agent — Windows & Linux, Sysmon-integrated
Behavioral dedup profiling — 21-day baseline, statistical anomaly detection
Account lockout source identification
Shutter View ambient security display
Operational Intelligence weekly digest
Standard support — email, 2 business day response
Full file access logging, available directly in the Chronolith UI
MFA coverage verification & attestation — reports gaps, never enforces
One-click human-authorized response actions — always reversible
Minimum (Starter / Professional)
ESXi 7/8, Nutanix AHV, or Hyper-V — single OVA/image, any supported hypervisor
8 vCPU · 32 GB RAM · 500 GB storage (90-day working retention)
Your own AI provider API key (BYOK — provider-agnostic, any supported model)
Recommended (Advanced / Enterprise)
ESXi 7/8, Nutanix AHV, or Hyper-V — dedicated VM reservation, no overcommit
20 vCPU · 64 GB RAM · 2 TB storage (90-day working retention)
HPE ProLiant Gen9 validated
Your own AI provider API key (BYOK — provider-agnostic, any supported model)
Storage figures reflect 90-day working retention. Longer-term archival storage sizes separately based on retention policy and source volume.