Matano

Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security/ log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops.

Features
- Ingesting, transforming, and normalizing log data using VRL and the ECS
- Store data in S3 object storage for cost effective, long term storage.
- Ingesting data into an Apache Iceberg based data lake, so you always own your own data with no vendor lock-in.
- Serverless, designed for zero-ops and unlimited elastic horizontal scaling.
- Write Python detections to implement realtime alerting on your log data.

Tags

aws bigdata cloud datalake logs logsmanagement rust security serverless siem threats

Badges