Precinct as a Virtual Machine

Cost-Contained SIEM and SOAR
Start a Free 30-Day Trial


Instant Log Collection and Analysis Compliance

  • CMMC
  • PCI
  • NIST
  • ISO

Never triage data collection again. Point all of your data at Precinct. Cost-contained pricing means every log is processed, analyzed and stored to deliver maximum protection, readiness and compliance.

1. Advanced Analysis

Leveraging crowdsourced cybersecurity expertise and time-tested methodologies from physical law enforcement, Precinct combines and consolidates massive amounts of disparate data into meaningful, investigable incidents.

2. No Parsers

Natural language processing delivers full comprehension of every log and message type. Precinct eliminates the work of having to build or maintain parsing logic. All parser maintenance is included in the WitFoo license agreement.

3. Unlimited Data

Horizontal scaling allows for unlimited data processing and retention. There is no additional license charge for adding processing or data nodes to a Precinct deployment.


Object-oriented SOAR delivers higher fidelity confidence to perform automatic or manual remediation actions. All API integrations, case books, and SOAR jobs are maintained by the WitFoo license agreement.

5. Business Reporting

Unparalleled business metrics allow for more transformational conversations between the security practice and the broader business. Out-of-the-box reports include Compliance Readiness, Tool Effectiveness, Staffing Requirements, and Operational Efficiency.

How it Works

  1. Fill out the form below.
  2. You will receive a welcome email with download instructions and a license key.
  3. Launch your VM by deploying the OVA or VHD files. There are no limit  or cost to the number of machines you can deploy. Guides can be found on the Technical Specifications page.
  4. Ship your data using the Guides on the Integration page. If you need an integration that doesn’t exist yet, email support.
  5. A WitFoo certified partner will deliver an executable quote for purchase after the trial.


That’s it. Precinct WitFoo Support take care of the rest. You can view the advanced analysis & reports and search data when needed.

Sustainable security operations has never been easier.


What Do I Get With Precinct?

WitFoo Precinct – As a Virtual Machine

WitFoo Precinct is built to work on launch with no professional services or new maintenance labor. Precinct is turn-key and ready to deliver sustainable, cost-contained value to all organizations. 


  • Unlimited Nodes for Expansion
  • Ongoing Creation and Maintenance of Custom Message Parsers & API Integrations 
  • Updates to WitFoo Library definitions for detection, integrations and playbooks 
  • Unlimited Training & Certifications via WitFoo Community 
  • Global Threat Intelligence Feed Updates 
  • Performance & Stability Monitoring by WitFoo Operations 
  • Big Data, SOAR, Analysis & Search Features 
  • SECOPS Business Dashboards 
  • Analysis Logic Updates 
  • Any combination of cloud, hypervisor, hosted or managed deployments. 

Learn More

Here are some resources to assist in learning more about WitFoo.

Product Overview and Demo

WitFoo co-Founders, Tim Bradford & Charles Herring, give a full product overview and demonstration of WitFoo Precinct.

Interactive Demo/Sandbox Environment

A fully interactive demonstration sandbox is available to experience the power & functionality of WitFoo Precinct using demo data.

Log & API Integrations

WitFoo Research and Development teams are constantly researching data sources and types using the best practices of natural language processing (NLP) to create semantic frames to fully understand all messages Precinct processes. The always growing list of integrations can be viewed here.

Free User Training

WitFoo Community provides free, self-paced training on WitFoo Precinct. It also contains a wealth of information on integrations, best practices and feature requests for the next generation of Precinct.

Employee Based Pricing

Pricing is based on the number of employees & contractors in the organization that have email addresses and/or access to non-guest resources. Never triage data collection again. All data is important evidence and you should never have to chose what data you can collect and analyze.

Number of employeesPricing (per employee, per year)

More details can be found on the Pricing Page.

Other Deployment Options

WitFoo Precinct is available in a wide range of deployment options in addition to virtual machine:

Start Your Free 30-Day Trial of Precinct

Submit the form below and the WitFoo Support team will spin up your instance of Precinct Cloud.