Why Tracemill exists
Security teams find out a detection stopped working when an incident review asks why nothing fired. The rule looked fine the whole time. What changed was upstream: a parser update, a pipeline route, a vendor renaming a field.
Tracemill makes that failure visible the day it happens, by continuously sending realistic telemetry through the same path your production data takes and checking that each detection still fires.
Founder
Built in the open
The Tracemill detection library, with every scenario, benign control and expected outcome, is public under Apache-2.0. github.com/tracemill/tracemill
Company
- Company
- Tracemill, Inc., a Delaware corporation
- Headquarters
- 2261 Market Street STE 80557, San Francisco, CA 94114
- Partners
- Cribl Technology Alliance Partner
- Contact
- support@tracemill.io