The gap SURU fills
Managed security services are built for companies with IT departments, device fleets and budgets to match, subscriptions often start at thousands of euros per month. A small office has a router, a handful of devices and nobody whose job is security. Between "buy an enterprise service" and "hope for the best", there was nothing. SURU is the missing middle: a micro-SOC: the smallest coherent version of a security operations center that still earns the name.
What it does, in plain terms
WATCHES
A hardened router sits at the edge of your network and keeps track of which device talked to which service, when and how much. Connection records only, never the content of your files, messages or browsing.
BLOCKS
Known attack traffic, malicious addresses and command-and-control servers are stopped at the router, before they reach any of your devices. Protection works even if nothing else is installed.
EXPLAINS
Instead of raw technical logs, every alert arrives as a short brief: what happened, why it matters, which steps to take now and whom to call if it's serious. Written for people, not analysts.
KEEPS DATA HOME
Everything is stored on your own equipment by default. Nothing leaves your network unless you explicitly decide it should, and all communication between SURU components is encrypted.
Fits the network you already have
Where possible, the SURU platform transforms your router into a security-valuable front door, that gives it full authority to block bad traffic on the spot. When the provider's box can't be replaced, SURU works in listening mode instead: it observes a copy of the traffic, detects and alerts, and leaves your existing setup untouched. Either way, monitoring starts on day one, and the platform grows organically with your organization, an optional monitoring node, protection agents on work computers, AI-assisted explanations or a handover to us as managing provider can each be added later, without rebuilding anything.
Three editions
- SURU FOSS: free and open source. The full core platform, open to inspection and community contributions.
- SURU Lite: adds built-in AI, so findings arrive already explained and ranked by urgency, with blocking measures already executed.
- SURU AI Plus: adds cloud integration and connections to the major AI providers, for the deepest analysis and automation the platform offers.
Open by design
SURU is built on proven open-source security components, hardened and assembled by our team, and we publish both the idea and the code. The concept behind the platform, including its architecture and design decisions, is documented publicly; the reference implementation can be deployed and verified by anyone.
New to the topic? Start with why small offices are targets.
Want SURU watching your office? We install, configure and support it.
Get in touch