Your network sees everything.
Now you can too.
Iris centralises logs from your firewalls, cloud tenants, and servers — detects threats in real time with AI-assisted triage, and alerts you the moment something matters. A single dashboard for SMBs and MSPs alike.
Install the Bridge on any Linux host in one line
curl -fsSL https://iris.vigilai.gr/install/bridge.sh | sudo bash -s -- \
--url https://iris.vigilai.gr --token brg_<your-token>Docker + systemd handled for you. Point your FortiGate/Grandstream/pfSense syslog at the Bridge's LAN IP:5514 and you're live.
No credit card required · Cancel anytime
The problem
Your firewalls log thousands of events every day.
You read none of them.
73%
of successful intrusions are detectable in firewall logs before the breach. Most go unread.
200+
days is the average time to detect a breach in SMBs that don't centralize their logs.
€4.8M
average cost of a data breach for EU SMBs in 2025. Detection saves you the disaster.
How it works
1 SaaS dashboard. 3 ways to connect. Zero pain.
Iris meets you where your data lives — whether that's a cloud tenant, a rack of firewalls in your office, or a custom in-house app. Same dashboard, same alerts, same security guarantees.
Cloud services
Microsoft 365, Google Workspace, Cisco Meraki, Cloudflare. OAuth consent and you're done — no install on your side.
~2 minutes
On-premise Bridge
A tiny outbound-only forwarder that lives on your LAN, buffers events during outages, and forwards over HTTPS. Runs anywhere Docker runs.
~5 minutes · zero ports opened on your firewall
Custom integration
Push events straight to our REST API. Bearer token, JSON, sample code in Python · curl · Postman. For your in-house apps and webhooks.
As fast as you can copy-paste
Same security guarantees, every method
What's inside
Built for the way you actually work.
Multi-vendor support
Grandstream GCC, FortiGate, pfSense, Mikrotik, Sophos — all in one schema.
Real-time detection
Brute force, port scans, ransomware C&C — caught the second they fire.
One dashboard
Live events, alerts, devices and trends — all in a single, fast pane.
AI-assisted triage
Claude reviews every critical alert, explains the threat, suggests next steps.
Smart alerts
Email, Teams, Slack, SMS. Severity-tiered. No alert fatigue.
GDPR-ready
Hosted in the EU. Per-customer data isolation. Right-to-erasure built in.
Vendor coverage
Full parsing today. Anything else through generic syslog.
Structured parsing available today
On the roadmap — coming with dedicated parsers
Roadmap vendors already ingest today through the generic-syslog path — dedicated parsers add richer categorisation and vendor-specific detection rules.
Built for
Iris fits anyone responsible for a network.
SMBs
10-200 employees with one or two firewalls. No budget for a SIEM. No time for log review.
MSPs & integrators
Managing dozens of client networks. Need a single pane of glass. Want predictable monthly margins.
In-house IT teams
Tired of grepping logs after every incident. Want proactive, not forensic.
Pricing
Standard plan — €199/month
Everything you need to protect a network of up to 25 firewalls.
- ✓ Up to 25 devices
- ✓ Configurable retention (15–90 days)
- ✓ Long-term threat intel (repeat attacker DB)
- ✓ Email + Teams + Slack alerts
- ✓ AI-assisted triage
- ✓ Weekly + on-demand PDF reports
- ✓ Team invitations + audit trail
- ✓ GDPR + NIS2 aligned · EU hosting
No credit card. Cancel any time during trial.
Your firewalls are already protecting you. Iris makes sure you know it.
Iris by Vigilai · Hosted in the EU