LogsInsight

Know who is trying your servers before they get in.

LogsInsight reads your servers' logs around the clock, without installing anything on them, and tells you in plain words when someone is guessing passwords, using an account they shouldn't, or poking at software you forgot to patch. It is the security team a growing business cannot yet hire, priced for the business you are today.

0agents to install on your servers
1 keyread-only, so we can look but never touch
90 daysof searchable logs kept for you
2FAon every sign-in, yours and ours

An alert, the way you get it

No jargon dump. What happened, and what to do next.
Example
High
What happened
Password guessing on your mail server
1,284 failed sign-ins for admin from 3 addresses abroad in the last 20 minutes.
What to do
Block the three addresses at your firewall. None of the attempts succeeded, so no password reset is needed.
DetectedWithin a minute of the logs arriving
Mapped toMITRE ATT&CK T1110 · Brute force
StatusAnalyst reviewing

Threats in motion

Every door they try,
already watched.

A server in Accra that faces the internet is tested from dozens of countries every day. Every dot below is a country that traffic comes from, and every line is a connection on its way to a server like yours.

Now watching SSH password guessing Frankfurt to Accra · flagged after 6 tries

An illustration of the traffic pattern we see on client servers. Inside your dashboard the same map is drawn from your own logs.

What we do

Every log line.
One pair of trained eyes.

Most small breaches are written in the logs days before anyone notices. We collect those logs over a read-only connection, run them through detection rules built for the attacks Ghanaian businesses actually see, and put a person on what matters.

Agentless collectionRead-only SFTP, nothing installed
Threat detectionBrute force, misuse, risky commands
Alert triageSeverity, owner and due time on each
Live threat mapWhere your traffic really comes from
Search and timelineFind any event in seconds
Forensics and evidenceHashed, timestamped, exportable
Monthly reportWritten for your board, not for us
Client portalYour own read-only view, with 2FA
VulnerabilitiesYour packages against CISA KEV and EPSS
IOC and ATT&CKKnown-bad indicators, mapped techniques
External exposureWhat the internet can see of you
Phishing analysisSend us the email, we take it apart
Threat briefingsNews that names software you run
AI-assisted analysisFaster first look, human decision
A named analystOn the Business plan
More detections coming soon

Nothing to install

We connect with a read-only key to the folder your logs already go to. No agent to update, no software on your servers, nothing that can change a setting. Remove the key and we are gone.

Plain words, real priorities

Every alert says what happened, how serious it is and what to do about it. The noise is filtered out before it reaches you, so a message from us means something.

Proof when you need it

The logs we receive are hashed as they arrive and kept for 90 days. When your bank, your auditor or the regulator asks what happened, the answer is one export away.

How it works

One call, then one key.

We talk first, agree what to watch, then your IT team needs one read-only key and one folder. We take it from there.

One read-only key

You create a locked-down SFTP account that can read your log folder and nothing else. We check that it really is read-only before we use it.

Logs flow in minutes

Linux, Windows, firewalls, web and mail servers. If it writes a log file, we can read it, and new lines arrive continuously.

Detection runs on every line

Rules for password attacks, privilege misuse, persistence and data theft fire as soon as the evidence lands, and every alert is mapped to a known attacker technique.

A person follows up

Alerts are triaged with a severity and an owner. On Business, your named analyst investigates and tells you exactly what to change.

Your first day

From our call to your first alert.

Once we agree the setup, the connection itself takes minutes.
1
We agree the setupA call: your servers, your plan, your contacts
Call
2
Read-only key addedChecked: it cannot write or delete
10 min
3
First logs arriveParsed, hashed and searchable
+5 min
4
First findingsWeak spots and past attempts surfaced
+1 hour
After the call, time to first findingsabout an hour

Pricing

Pick the cover you need.
Move up when you grow.

Every plan watches your logs around the clock. Pro adds threat intelligence. Business adds a cybersecurity analyst who knows your systems by name.

Starter

Log monitoring and alerts for a business taking its first step.
Ask for a quotepriced by the number of servers
  • Agentless log collection over read-only SFTP
  • Threat detection on every log line
  • Alerts with severity and next steps
  • Live threat map, search and timeline
  • Forensics and hashed evidence, 90 days kept
  • Client portal with two-step sign-in
  • Monthly security report
  • Threat intelligence
Ask about Starter
Most chosen

Pro

Everything we offer, for a business that holds data worth stealing.
Ask for a quotepriced by the number of servers
  • Everything in Starter, plus:
  • Vulnerability matching against CISA KEV and EPSS
  • Indicators of compromise and ATT&CK mapping
  • External exposure monitoring (Shodan)
  • Phishing email analysis
  • Threat briefings that name software you run
  • AI-assisted alert analysis
Ask about Pro

Business

A security team of your own, without hiring one.
Ask for a quotepriced by the number of servers
  • Everything in Pro, plus:
  • A named cybersecurity analyst for your organisation
  • Every alert investigated and followed through
  • Written incident findings with what to change
  • Regular review of your security with your team
  • Overseen by a CSA-licensed professional
Ask about Business

Prices exclude VAT and levies. Change plan at any time.

Access & control

We look.
We never touch.

A security service that needs the keys to your servers is a risk of its own. LogsInsight is built so that letting us watch never widens what an attacker could reach.

Read-only by design

Our connection can open your log folder and nothing else. We test that before the first pull, and refuse a key that could write.

  • Nothing installed on your servers
  • One key, revocable in seconds
  • Checked for write access before use

Two steps to sign in

Every sign-in, on your side and ours, takes a password and a code from a phone. A stolen password alone opens nothing.

  • Authenticator-app codes for everyone
  • Your staff get read-only access
  • Analysts only see clients assigned to them

Every action on the record

Each batch of logs is hashed when it arrives, and every sign-in and change on our side is written to an audit trail you can ask to see.

  • Tamper-evident evidence chain
  • Full audit log of staff actions
  • Encrypted backups, restore-tested

Who is behind it

A licensed professional,
not just software.

LogsInsight is run by a cybersecurity professional licensed by Ghana's Cyber Security Authority under the Cybersecurity Act, 2020 (Act 1038). The person who reviews your alerts is accountable to the national regulator, and you can check their licence yourself.

  • Licensed and accountable under Ghanaian law
  • A real person reviews what the software finds
  • Your data is handled under a written agreement, signed before we connect

Run your servers like a business ten times your size.

Join the waitlist and tell us about your setup. We call every business personally, agree what to watch and how, and only then set up your account.

  • Nothing installed on your servers
  • Run by a CSA-licensed cybersecurity professional
  • Two-step sign-in and read-only access included
  • A call with us first: no payment to join the list

We use these details only to contact you about LogsInsight. Joining the list does not create an account or commit you to anything.

Signing in

Each client has a private sign-in address, sent by email when your account was set up. Use that link, or contact us if you cannot find it.