Observability & Security integrations
Streams metrics, logs, alerts, and vulnerability findings into Axiom. Creates incidents with context and triggers investigation, containment, and remediation workflows.
Alerts that become incidents with context
An alert arrives as an incident already carrying the affected service, recent changes and related history, rather than as a line to be interpreted.
Containment in the first minutes
A compromised endpoint is isolated from the network straight from the incident, and connectivity is restored the same way once it is cleared.
Findings that arrive with their blast radius
A vulnerability finding is joined to the assets it affects, who owns them and what depends on them, so triage is a decision rather than an investigation.
Observability & Security tools we connect to
Common questions
Does STLabs replace our monitoring or security tools?
No. They keep their dashboards, detection and scanning. STLabs reads their alerts and findings and triggers their actions.
Can it reduce alert noise?
It groups related alerts into a single incident and suppresses monitors during planned work, which addresses the two largest sources of noise.
Can it isolate a device without a human deciding?
That is your choice per action. Containment is commonly set to require approval, and both the request and the decision are recorded.