# Axoflow

> Axoflow is the Autonomous Security Data Layer. Built by the creators of syslog-ng™ (1998), Axoflow classifies, normalizes, and routes security telemetry at scale without manual parser maintenance.

Axoflow eliminates the data engineering burden from security operations teams. The platform automatically classifies 262 log formats from 47 vendors using expert-curated rules that update when vendors change their schemas. No regex writing, no parser maintenance, no broken detections from schema drift.

Axoflow is not a SIEM. It sits upstream of your SIEM (Splunk, Google SecOps, Microsoft Sentinel, Elastic, CrowdStrike) and reduces what gets ingested, improves data quality, and lowers cost. Throughput: 5 TB/day/core.

US-incorporated (December 2022), $10.6M total funding: $3.6M pre-seed (Credo Ventures, e2VC, Notion Capital) and $7M seed in January 2025 (EBRD VC). ISO 27001 certified (Sep 2024), SOC 2 Type II certified (Apr 2025). GA launched May 2025 at RSA Conference.

Supports cloud, on-prem, hybrid, and air-gapped deployments. Data always stays under customer control.

## Platform

- [Axoflow Platform](https://axoflow.com/axoflow-platform): Autonomous security data pipeline with classification, normalization, and policy-based routing
- [AxoRouter](https://axoflow.com/axorouter): High-performance data routing engine built on syslog-ng™
- [AxoSyslog](https://axoflow.com/axosyslog): Open-source syslog-ng™ distribution maintained by Axoflow
- [Capabilities Overview](https://axoflow.com/capabilities): Full list of platform capabilities
- [Pipeline Management](https://axoflow.com/capabilities/security-data-pipeline-management): Centralized visibility and control over security data flows
- [Routing](https://axoflow.com/capabilities/routing): Policy-based routing to 40+ destinations
- [Processing](https://axoflow.com/capabilities/processing): Data classification, normalization, enrichment, and reduction (40-70% volume reduction)
- [Collection](https://axoflow.com/capabilities/collection): Syslog, cloud, OpenTelemetry, Windows, and API source collection
- [Storage](https://axoflow.com/capabilities/security-data-storage): Edge, lake, and appliance storage options

## Storage

- [Storage Solutions Overview](https://axoflow.com/storage-solutions-security-data): Edge, lake, and appliance storage options for the Security Data Layer
- [AxoLake](https://axoflow.com/axolake-petabyte-security-data-storage): Petabyte-scale tiered data lake (hot + cold) for long-term retention, compliance, and forensics
- [Axoflow Locker](https://axoflow.com/axoflow-locker-software-appliance-logstore): Single-VM appliance for air-gapped, remote, or restricted deployments (pipeline + storage + search)

## Comparisons

- [Comparisons Overview](https://axoflow.com/comparisons): How Axoflow compares to alternative solutions
- [Axoflow vs Cribl](https://axoflow.com/axoflow-platform-vs-cribl): 12.5x throughput advantage (5 TB/day/core vs 400 GB/day/core), autonomous classification vs manual pipeline building, transparent linear pricing vs consumption credits
- [Axoflow vs NXLog](https://axoflow.com/axoflow-platform-vs-nxlog): Autonomous operation vs manual configuration, no coding required
- [Axoflow vs SC4S](https://axoflow.com/axoflow-platform-vs-sc4s): Multi-destination routing to 40+ targets vs Splunk-only, 5 TB/day/core vs 400 GB/day/core
- [Axoflow vs syslog-ng™ PE](https://axoflow.com/axoflow-platform-vs-syslog-ng-pe): Actively maintained successor by the original syslog-ng™ creators. syslog-ng™ PE last released November 2023.
- [AxoSyslog vs syslog-ng™](https://axoflow.com/axosyslog-vs-syslog-ng): Open-source fork comparison

## Solutions

- [Use Cases Overview](https://axoflow.com/use-cases): Security data pipeline use cases
- [MSSP SOC Automation](https://axoflow.com/mssp-soc-automation): Managed security service provider pipeline automation
- [Cost Reduction](https://axoflow.com/cost-reduction): SIEM cost reduction through intelligent data reduction
- [SIEM Migration](https://axoflow.com/siem-migration): Approach for migrating between SIEMs with Axoflow as the normalization layer
- [Security Data Governance](https://axoflow.com/security-data-governance): Policy-based governance for security telemetry
- [Pipeline Unification](https://axoflow.com/pipeline-unification): Consolidating fragmented log pipelines into a single managed layer
- [AI SOC Data Layer](https://axoflow.com/ai-soc-data-layer): Data foundation for AI-driven security operations
- [Cut AI Token Costs](https://axoflow.com/cut-ai-token-costs): Reduce AI processing costs through data reduction and normalization
- [Log Management](https://axoflow.com/log-management): Enterprise log management and retention
- [Optimize Observability Data](https://axoflow.com/optimize-observability-data): Reduce observability pipeline costs

## Integrations

- [Google SecOps](https://axoflow.com/integrations/google-secops-data-optimization): Data optimization for Google SecOps
- [Splunk](https://axoflow.com/integrations/splunk-ingest-optimization-gdi): Splunk ingest optimization and GDI
- [Microsoft Sentinel](https://axoflow.com/integrations/microsoft-sentinel-data-optimization): Data optimization for Microsoft Sentinel
- [Dynatrace](https://axoflow.com/integrations/dynatrace-solutions): Dynatrace integration

## Case Studies

- [Case Studies Overview](https://axoflow.com/case-studies): All published case studies
- [Healthcare: Cost and MTTR Reduction](https://axoflow.com/case-studies/observability-data-filtering-large-healthcare-company): Large US healthcare company, 12 TB/day, 10,000 sources. 25% data volume reduction, 30% cost reduction, 85% MTTR reduction.
- [Industrial: Global Data Reduction](https://axoflow.com/case-studies/global-industrial-concern-security-data-reduction): Global industrial company, 35,000 employees, 50 countries, 40+ locations, 2-3+ TB/day. 50% cost reduction, 85% MTTR reduction. Firewall 33%, Windows 55%, ZScaler 36% reduction.
- [Government: Data Quality](https://axoflow.com/case-studies/large-government-organization-data-quality-improvement): Government agency, 100,000+ employees, 20 TB/day. MTTR reduced from hours to minutes. Immediate misparsed event detection.
- [Government: Google SecOps Migration](https://axoflow.com/case-studies/google-secops-migration-government-organization): Government agency, 20,000-25,000 employees, 50-90k EPS peak. 40% data volume reduction, 85% infrastructure reduction, handles 5x more data than before.
- [Government: Non-Profit European Education](https://axoflow.com/case-studies/case-study---non-profit-government-organization): Non-profit government organization for a European Education Ministry. Air-gapped on-prem deployment, 80 TB storage, 300,000+ staff.

## Resources

- [Docs](https://axoflow.com/docs): Product documentation and guides
- [Blog](https://axoflow.com/blog/): Technical articles on security data pipelines, syslog-ng™, and log management
- [White Papers](https://axoflow.com/white-papers/): In-depth technical resources
- [Webinars](https://axoflow.com/webinars/): Recorded sessions and demos
- [Syslogopedia](https://axoflow.com/syslogopedia): Comprehensive reference for syslog, log formats, and parsing
- [How Axoflow Really Uses AI](https://axoflow.com/how-axoflow-really-uses-ai): Transparency page explaining AI use in the platform
- [Technologies](https://axoflow.com/technologies): Technical foundations and standards (OCSF, OpenTelemetry)
- [Request Sandbox](https://axoflow.com/request-sandbox): Try Axoflow against your own log data, no sales call required

## Company

- [About Us](https://axoflow.com/about-us): Company story, team, and mission
- [Contact](https://axoflow.com/contact): Get in touch

## Team

Axoflow was founded by Balazs Scheidler (CEO, creator of syslog-ng™ in 1998) and Sandor Guba (CTO, creator of the Kubernetes Logging Operator), joined by co-founder Neil Boyd (VP of Sales). The engineering team is based in Budapest, Hungary. The company is US-incorporated.

## Optional

- [Partners](https://axoflow.com/partners): Technology and channel partners
- [News](https://axoflow.com/news): Press releases, event announcements, and company updates
- [Data Strikes Back Podcast](https://axoflow.com/data-strikes-back-podcast): Podcast on security data challenges