SheerSight. A clearer view of the security we manage.
Included with every Sheer Safe engagement at no additional platform fee. SheerSight brings connected security logs and alerts together so our team can investigate issues and manage the agreed security work.
Why it exists
Security information in one place.
Connect supported systems to bring relevant security logs and alerts into one place. Our team uses that information to investigate issues and coordinate the work included in your service.
Capabilities
From connected activity to a clear next step
01
Collect
Collects supported activity across identity, collaboration, cloud, endpoint and network sources. Your connected coverage is confirmed during setup.
02
Triage
Decisions your team and Sheer Safe record during alert review can reduce repeat alerts for known, benign patterns. Suppression follows the safeguards configured for your instance.
03
Alert
Relevant signals reach the console and your configured notification channels, with context for investigation. We confirm the channel setup with you.
04
Connect related alerts
We bring related alerts together so our team can investigate the wider issue and explain what needs attention.
Roadmap
What’s coming next.
These platform capabilities are on the roadmap and are not available today. Hands-on compliance support is already available through our services. No release dates are announced here.
Compliance management in SheerSight: coming soon
We are adding platform features to organize compliance work and evidence. Hands-on compliance support is already available through our services.
Trust center: planned
A place to share approved security and compliance information with customers and prospects.
Cost monitoring and optimization: planned
Tools to understand infrastructure spending and identify opportunities to use resources more efficiently.
Performance monitoring and optimization: planned
Tools to understand workload performance and identify improvements to infrastructure and resource use.
The pipeline
From activity to investigation
01
Collect
from supported tools
02
Triage
with configured safeguards
03
Alert
through agreed channels
04
Connect
bring related alerts together
Integrations
Start with the tools you use
A selection of supported sources. Availability, vendor plans and setup paths vary by connector.
Identity
Entra ID
JumpCloud
Google Workspace
SaaS
Google Workspace
Microsoft 365
GitHub
GitLab
Linear
Notion
Cloud
AWS
Azure
GCP
Cloudflare
Endpoint / MDM
CrowdStrike
SentinelOne
Wazuh
Kandji
Network
Suricata IDS
The offer
Included with every Sheer Safe engagement
The platform is included with every Sheer Safe engagement at no additional platform fee. We explain any separate security software, hosting and storage costs in your service proposal.
✓
Collection from agreed, supported sources
✓
Triage decisions and configured noise reduction
✓
Console visibility and configured notifications
✓
Related alerts grouped into incidents
✓
Source health and triage metrics
How it runs
Clear boundaries for access and data
Your dedicated security instance
Collection, detection and raw security data sit on a dedicated instance operated by Sheer Safe. The hosting region is agreed during onboarding.
Credentials encrypted for your instance
For console connections, your browser encrypts credentials before the console relays them. Your instance decrypts them for collection. Assisted setup follows the agreed provisioning process.
Agreed access and permissions
Source permissions and any sensor deployment are confirmed before setup. Sheer Safe can access your instance for maintenance and support; response actions follow your authorisations.
Know where your data goes
Raw security data stays on your dedicated instance. Selected summaries reach the shared console and may include user, host or IP information. Agreed notifications may also reach your configured channels.
FAQ
Common questions
What does included mean?
Every Sheer Safe engagement includes SheerSight at no additional platform fee. Security products such as XDR, MDM, security training, DLP and data classification retain their own licensing requirements. We explain any separate security software, hosting and storage costs in your service proposal.
Where does it run?
Raw data and detection run on a dedicated security instance that Sheer Safe operates for you. Your team uses a shared console with organisation-scoped access. Hosting and configuration are agreed during setup.
What about our data?
Raw data remains on your instance, while selected summaries reach the console. Sheer Safe can access the instance for maintenance and support. We confirm access, retention and notification arrangements with you.
What happens if we stop working together?
Your engagement sets the process and timing for access removal, data export or deletion, and deployment wind-down. We agree those arrangements with you.
Let’s talk about what your business needs.
Start with a conversation about your security services and how SheerSight can support the work.