WysperHub ยท In development
A SIEM that runs inside your own AWS account.
You install WysperHub in your own AWS account, in a commercial region or GovCloud. Your logs, alerts and evidence stay in your account unless you choose to forward alerts. It's designed so it doesn't contact us: no license check-ins, and no telemetry, usage data or crash reports.
Who it's for
Built for defense contractors that handle CUI or FCI. For CMMC Level 2, WysperHub's evidence package maps to NIST SP 800-171 Rev 2. For FCI-only contractors at CMMC Level 1, WysperHub supports evidence for the FAR 52.204-21 practices it covers today: authorized-user access and AWS account activity across every account (CloudTrail), and Linux host activity (Linux Sensor). Windows endpoint monitoring is in final testing. Malicious-code and network-traffic sources are planned. It also gives you a head start toward Level 2 if you later take on CUI.
What it won't do
WysperHub doesn't certify your environment, and no product can. CMMC certifies companies, not products. Your assessment decides the result, whether it's a self-assessment or a third-party assessment, not any tool.