Product
Built for security teams who are tired of stitching CSVs together.
KeyCaliber is a streaming telemetry pipeline that ingests from your existing tools, normalizes the data into a queryable canonical model, and exposes coverage gaps through an API and UI your team can actually use.
How it works
- 01
Connect
Add read-only credentials for the tools you already run. KeyCaliber pulls from CrowdStrike, Tenable, Qualys, Defender, ServiceNow, Okta, Azure AD, and more.
- 02
Normalize
Every record is mapped to a canonical schema. We keep the full vendor payload alongside the normalized fields — zero data loss, audit-ready.
- 03
Deduplicate
Assets are matched across tools using a confidence hierarchy: golden identifiers (CrowdStrike AID, CMDB sys_id) first, then serial / BIOS UUID, then hostname / MAC, then IP.
- 04
Surface gaps
Coverage queries answer the questions your auditors ask: which critical assets are missing EDR? Missing vuln scans? Missing identity provisioning?
Engineered for real scale
Assets per tenant
Tenants per cluster
Network flow records
Built on PostgreSQL, Dgraph, and ClickHouse with strict database-per-tenant isolation. Every pipeline activity is checkpointed and resumable — no silent failures, no losing hours of ingestion to a single OOM.
Ready to see your stack, end to end?
A 30-minute walkthrough is usually enough to know if KeyCaliber fits.
Request a demo