Take control of your data

Telemetry storage and cost optimization


LimaCharlie makes security data collection from any source easily accessible and affordable. This data can be used to generate detections and it includes a full year of telemetry storage at no extra cost: all endpoint, network, external logs, and artifacts.

You know it is a good product when it’s one that you find for use in your home lab, show your coworkers, and 4 months later are planning a full enterprise-wide deployment.
Picture of Jeff Gonzalez

Jeff Gonzalez

Senior Security Automation and Detection Engineer, Chainalysis

Send data where you need it


Optimize the treatment of your data and have the control to output to any destination. This enables you to, for example, send select detections to your SIEM and choose to send audit logs to more cost-effective data lakes. Retain all other data with LimaCharlie for search and compliance dramatically reducing data storage costs.

Collect data from any source


LimaCharlie collects endpoint, network, and external log telemetry data displayed in a single interface with the ability to run detection, automation, and response rules at wire speed. Get all of your security data through a single hub, normalized to the same data format.

With LimaCharlie, you can ingest logs or telemetry from any external source in real-time with built-in parsing for popular formats (Carbon Black, Google PubSub, Office 365 logs, Google Cloud Audit logs, 1Password, and more) and the option to define your own custom sources.

Optimize data storage costs


Meet compliance requirements by leveraging 1 year of searchable telemetry storage at no extra cost. Detections as well as all endpoint, network, and external log telemetry will be stored, making LimaCharlie one of the most cost-effective ways to store your security data.

Interact with individual endpoints in real-time or search and explore a year’s worth of data and quickly see the extent of the compromise.


Drastically reduce security tooling spend, all while avoiding vendor lock-in.


Learn about running detection and response rules over historical telemetery.


LimaCharlie offers the ability to bring in external logs and telemetry from any source.

Detect and respond on everything.

Ready to transform your SecOps for the modern era?


Talk to our solution engineers.