Sidecar monitor showing device counts, resource allocation and throughput by protocol
Sidecar

Collect every log inside your network. Only clean events leave.

The Sidecar sits in your network, reads your devices, removes personal data and sends structured events out over one outbound connection.

Reads 300+ sources the moment they arrive.

GhostAnalyst integrates with 300+ security vendors across firewalls, endpoints, identity, cloud, network, WAAP and NDR, applications, and databases.
See all integrations

What happens to a log on your site.

Everything in this flow runs on the Sidecar, inside your network.

  1. Step 1ReceiveSyslog, API and SNMP from your devices
  2. Step 2ReadEach source is parsed into one standard format
  3. Step 3ScrubPersonal data is removed
  4. Step 4SendClean events leave over one outbound HTTPS connection

Your raw logs never leave.

  • No inbound firewall changes

    The Sidecar only connects out, over mTLS on TCP 443. Nothing outside opens a connection in.

  • Devices managed locally

    Device credentials are kept on the Sidecar, with no operator remote login needed after install.

  • Any format

    If a device is new to us, a parser is built for it rather than the log being dropped.

Connectivity: the on-premises Sidecar collects and cleans logs, then connects outbound only over mTLS on TCP 443 to the sovereign cloud in Kuala Lumpur; raw logs stay on premises
Only cleaned events leave, outbound over mTLS on TCP 443, and nothing in the cloud opens a connection in. The Sidecar checks for verdicts and actions every 60 seconds and buffers up to 40 GiB locally if the link drops.Open full size

Your team manages it from its own screen.

Register devices, check they are reachable, see the events each one sends and watch what the privacy filter removes.

  • Discover devices on your private subnets without active scanning
  • Poll devices over SNMP for health
  • Verify each device's connection and credentials
Sidecar live telemetry with ingest rate, events per second over time and ingest volume

One host specification.

The installer checks CPU, memory and operating system and stops if they fall short. Storage and network card are guidance.

ResourceSpecificationChecked by installer
CPU8 vCPUYes
Memory16 GBYes
Operating systemUbuntu 22.04 or 24.04 Server (Minimal)Yes
Storage240 GBGuidance
Network card1 GbpsGuidance
Scoping questionnaire

Put a Sidecar in your network.

60-day full-platform trial. No credit card. No inbound firewall changes. Live in under an hour.