Featherweight Probe. Heavyweight Security.

Microflow Nano is a cross-architecture basic data capability. It is a host-based, high-performance, fine-grained, multi-dimensional traffic log governance tool that provides real-time packet forwarding and PCAP playback.
Microflow.io is a number of open source projects and dashboards built around Nano for attack detection, performance monitoring, data security and other scenarios.

Scenarios

Microflow Nano is designed as an open and versatile data probe, capable of broadly adapting to various data analysis platforms, such as ELK, Graylog, OpenSearch, Splunk, and AWS CloudWatch, Azure Monitor, Wazuh, QRadar...
It is also compatible with other SOC/XDR/AISEC/AIOPS products or solutions that utilize these platforms.

Characteristics

Microflow Nano is designed with robust capabilities for large-scale deployment and 24/7 operation.
It is meticulously engineered for compatibility, security, agility, processing performance, resource efficiency, self-monitoring, and functional completeness.

Large-scale Practical Verification

Verifiable deployment cases in several large-scale cloud environments, with a deployment scale of over 20,000 virtual machines, have undergone complex and rigorous practical testing, mature and reliable enterprise-level standard products.

Cross Architecture Agile Deployment

Support x86_64 & ARM 64; K8S/image, IaaS/Server, PaaS/VM;
There is no need to worry about the Linux kernel version, and Windows is fully supported; Standalone Program, no operational dependency, fast and secure deployment.

Extreme Processing Performance

Microflow Nano operates with exceptional efficiency, ensuring that 99% of production environments require no additional resources.
In the rare 1% of extreme cases, Microflow Nano automatically activates its degradation algorithms to ensure business continuity.

Powerful Data Capability

Microflow Nano can be customized to output traffic logs containing various session contents and KPI/KQI in real time with JSON;
This includes TCP/UDP pairs, DNS, HTTP headers & bodies, SQL..., raw packets, as well as host metrics related to these session.

FAQ & Demo

FAQ

Is Nano safe? What are the main functions of Nano? Processing performance and resource consumption? How does Nano adapt to various log analysis platforms? How to securely transmit data across the public network?

Demo

In a large-scale cloud environment, how can we detect lateral movement attacks in real time? How can we enable SOC/XDR to possess fine-grained contextual analysis capabilities? How can we detect abnormal behavior related to sensitive data?

Downloads

Microflow Nano

Free for individuals and SMEs

Microflow.io

Completely free and open source

  • Modsecurity Anylog: Modsecurity ( famous WAF engine) for analyzing log data

  • STIX Spark: Super lightweight, high-performance, real-time STIX library comparison tool（docker）

  • DashBoard Archiver: With a new idea and a simple architecture, it solves the performance problem of the log data dashboard during rollback

Who are we?

We are dedicated to maximizing the value of data across multiple scenarios. Therefore, we focus on data collection and backend AI algorithms, while entrusting data management and visualization functionalities to well-established and mature data/log analysis tools that users are already familiar with.

[email protected] © MicroFlow.io. all rights reserved.

Thank you!

Aliquam sem fringilla ut morbi tincidunt augue interdum velit. Tincidunt tortor aliquam nulla facilisi cras lorem ipsum dolor sit amet.