ArterialBY ARBITER SECURITY
In development

Follow a finding
back to the evidence.

Arterial is a security operations workspace in development. We’re connecting endpoint telemetry, detection and investigation so analysts can trace a finding back to what supports it.

The local development preview includes case review, scoped event search and evidence inspection. Production availability has not been announced.

Finding → evidence → caseConceptual · synthetic
PROCESSNETWORKFILE DETECTIONlocal rules EVIDENCEsource-linked CASE REVIEWanalyst
  1. 01 / OBSERVEEndpoint telemetry
  2. 02 / CONNECTDetection + evidence
  3. 03 / INVESTIGATEAnalyst review

A finding should retain its supporting evidence as it moves into investigation. This synthetic illustration describes the local development direction, not a live deployment or response system.

Telemetry. Evidence. Investigation.

Keep the finding
and its context together.

The development work follows a simple path: collect a signal, preserve its evidence and give an analyst the context to investigate.

Connect the signals

The local pipeline combines Linux telemetry, rule-based detection and correlation with selected AI analysis. Operational detection quality and fleet scale still need qualification.

Inspect the evidence

The local analyst console brings case review, scoped event search and evidence inspection together. Supporting observations and provenance stay central to an investigation.

Make authority explicit

Local personnel and case-access workflows enforce policy at the API boundary. Human response review is being developed; current review records cannot authorize or dispatch an action.

Development status

In development.
Built with the boundary in view.

Arterial currently has a local development implementation with synthetic validation. It has no production deployment, and production availability has not been announced.

Production qualification, live identity-provider interoperability, response approval and execution, and broader platform support remain unfinished. This page describes the product direction and current local scope.

Arbiter, Aletheia, Arterial and Anankyr have complementary roles. Shared branding does not imply a connected product suite.