The world's smallest host traffic analysis probe.

Microflow Nano is a featherweight, high-performance, and fine-grained host-based traffic probe for real-time parsing and output of session content and KPI/KQI.
Microflow.io is a set of dockers and dashboards built around microflow Nano, including cloud security, data security and performance monitoring...

Scenarios

Microflow Nano is designed as an open and versatile data probe, capable of broadly adapting to various data analysis platforms, such as ELK, Graylog, OpenSearch, Splunk, and AWS CloudWatch, Azure Monitor, Wazuh, QRadar...
It is also compatible with other SOC/XDR/AISEC/AIOPS products or solutions that utilize these platforms.

Characteristics

Microflow Nano is designed with robust capabilities for large-scale deployment and 24/7 operation.
It is meticulously engineered for compatibility, security, agility, processing performance, resource efficiency, self-monitoring, and functional completeness.

Zero Downtime Deployment

Microflow Nano deployment and operation are completely non-intrusive to business processes, requiring no restarts or modifications to hosts and services, and not even additional computing resources.
This feature is crucial for large-scale deployments.

Powerful Data Capability

Microflow Nano can be customized to output traffic logs containing various session contents and KPI/KQI in real time with JSON;
This includes TCP/UDP pairs, DNS, HTTP headers & bodies, SQL..., raw packets, as well as host metrics related to these session.

Extreme Processing Performance

Microflow Nano operates with exceptional efficiency, ensuring that 99% of production environments require no additional resources.
In the rare 1% of extreme cases, Microflow Nano automatically activates its degradation algorithms to ensure business continuity.

Cross Architecture Agile Deployment

Microflow Nano is a standalone program with dependency-free, just 500KB in size (possibly the smallest of its kind for Linux). It offers a single version compatible with nearly all major Linux distributions, along with Windows and X86/ARM, Image/Docker versions.

FAQ & Demo

FAQ

Is Nano safe? What are the main functions of Nano? Processing performance and resource consumption? Do I need to restart or modify the host or business configuration? Is Nano free?

Demo

How to monitor API performance and risk? How to monitor and locate abnormal cloud traffic? How to monitor SQL without intrusion? How to detect abnormal behaviors of sensitive data?

Downloads

Microflow Nano

Free for individuals and SMEs

Microflow.io

Completely free and open source

  • Modsecurity Anylog: Modsecurity ( famous WAF engine) for analyzing log data

  • STIX Spark: Super lightweight, high-performance, real-time STIX library comparison tool（docker）

  • DashBoard Archiver: With a new idea and a simple architecture, it solves the performance problem of the log data dashboard during rollback

Who are we?

We are dedicated to maximizing the value of data across multiple scenarios. Therefore, we focus on data collection and backend AI algorithms, while entrusting data management and visualization functionalities to well-established and mature data/log analysis tools that users are already familiar with.

[email protected] © MicroFlow.io. all rights reserved.

Thank you!

Aliquam sem fringilla ut morbi tincidunt augue interdum velit. Tincidunt tortor aliquam nulla facilisi cras lorem ipsum dolor sit amet.