The problem
Security investigations shouldn't mean endless manual log searches.
Evidence is scattered
Relevant events are spread across numerous log files, each in its own format.
Connections take time
Finding relationships between events means time-consuming, manual digging across files.
Findings are hard to trace
Documenting conclusions and linking them back to their sources is difficult to do consistently.
ThreatTrail supports your judgment as an investigator. It doesn't replace it.
How it works
From raw evidence to actionable findings.
STEP 01
Create an investigation
Organize the work around a specific incident.
STEP 02
Upload evidence
Bring relevant logs and investigation files into one workspace.
STEP 03
Investigate with AI
Ask questions across the available evidence and explore the findings.
STEP 04
Trace and report
Inspect source citations and generate an investigation report.
Product
Everything you need to investigate in one workspace.
Evidence ingestion
Upload and process supported evidence files, including JSON, CSV, TXT and Markdown, into one searchable workspace.
AI-powered investigation
Ask natural-language questions about everything you've uploaded, instead of searching file by file.
Evidence-grounded answers
Relevant passages are retrieved from your evidence to support each response, keeping answers tied to what the files contain.
Source citations
Navigate from an answer back to the original evidence and inspect the cited passage yourself.
Investigation reports
Generate a report that summarizes your findings, so documenting an incident doesn't start from a blank page.
Investigation management
Keep each incident in its own investigation, with its evidence and questions scoped to the case.
Demo
See ThreatTrail in action.
Explore how an investigation moves from evidence upload to AI-assisted analysis and a generated report.
Security & Privacy
Your evidence deserves careful handling.
Security investigations can contain sensitive information. ThreatTrail is being built with a focus on responsible evidence handling, controlled access, and transparency.
Private access to evidence
Each investigation's evidence lives in its own workspace and is reached through your signed-in account.
Retention and deletion
Sensitive evidence calls for clear retention and deletion terms. Final terms will be disclosed before any purchase.
Transparency about AI providers
Answers are generated by AI models. You should know which third-party providers are involved and what is shared with them.
Careful handling of customer data
Only upload data you're authorized to share. Evidence can be sensitive, and handling it responsibly is a requirement for this product.
Pricing
Start small. Investigate with confidence.
Try ThreatTrail for free, then choose the investigation capacity that fits your needs.
Free
$0
- 1 investigation
- Up to 3 evidence files per investigation
- 20,000 AI chat tokens
- 200,000 evidence-processing tokens
- AI-assisted questions and source citations
Starter
PROPOSED$5one-time
- 3 investigations
- Up to 10 evidence files per investigation
- 100,000 AI chat tokens
- 1,000,000 evidence-processing tokens
- AI-assisted questions, citations, and report generation
Investigator
PROPOSED$15one-time
- 5 investigations
- Up to 20 evidence files per investigation
- 500,000 AI chat tokens
- 5,000,000 evidence-processing tokens
- AI-assisted questions, citations, and report generation
Paid plans are one-time purchases. Create a free account, then choose a plan from Plan & usage inside ThreatTrail.
Limits apply to model usage (tokens) and evidence capacity (investigations and files). Paid-plan prices and allowances are proposed and may change. Final allowances and retention terms will be disclosed clearly before purchase.
FAQ
Questions, answered.
ThreatTrail is an AI-powered workspace for security investigations. You upload evidence such as logs, exports and access records to an investigation, ask questions in plain language, and review answers alongside the sources they came from.