Artica SIEM — Proxy & Firewall Analytics Made Simple

Proxy , iptables & fortigate analytics appliance for SMBs: dashboards, GeoIP, automatic threat detection and months of history, on-premises.

See what's happening on your network, keep months of history, and get warned before a problem turns into an incident — all on one appliance you own.

Prerequisite | Install Artica SIEM | Connect Artica-proxy | Connect Artica reverse-proxy | Artica SIEM for FortiGate

Made for small & mid-sized businesses

You don't have a 24/7 security operations center.
You have one or two people keeping everything running.

Artica SIEM was built for exactly that: it takes the logs of:

They already produce and turns them into clear dashboards, geolocation insights and automatic alerts — without a data-science team, without a cloud bill that grows every month, and without your data ever leaving your building.

Why businesses like yours choose it

No data loss.
Every event is safely written to disk before it's confirmed — a reboot or a network hiccup never makes a log disappear.
Months of history, tiny footprint.
Old data is automatically summarised (full detail for a few hours, then 10-minute, hourly and daily views). You keep the big picture for months while using a fraction of the disk.
Know where traffic goes.
Every connection is tagged with its country, so you instantly see the top destinations — and spot traffic heading somewhere it shouldn't.

Automatic threat detection.
Ready-to-use rules catch port scans, bursts of blocked traffic and suspicious sources, and alert you — with no alert spam.
Works with what you have.
Point your Fortigate or iptables firewall at it over syslog — no agents to install.
Your data stays yours.
Everything runs on your own hardware, on-premises. Only country codes are stored for geolocation — privacy by design.

What you can see and do

Traffic dashboards
Who's browsing what, how much bandwidth, top sites and top countries
Firewall analytics
Accepted vs. blocked sessions, top sources and destinations, over time
Detection & alerts
Port scans, blocked-traffic spikes, country-based rules — with acknowledgement
GeoIP intelligence
Country for every proxy destination and every firewall flow

Smart storage
Automatic data ageing — long history, controlled disk usage
Capacity planner
Know how much memory and disk you need before you deploy
Anomaly detection
Surfaces the unusual so you notice it early
Backup & health
Built-in backup, restore and health checks — set it and forget it

Multiple sites or clients?

Artica SIEM keeps every tenant's data strictly separated.
Perfect for a business with several sites, or for an IT provider looking after several customers from a single appliance.
Each one sees only their own traffic.

Multi-tenancy:
Isolate several client organisations on one Artica SIEM:
what a tenant is, how to declare one, and how to grant it to a group of users.
Granting tenant privileges to a group
Grant a SIEM tenant to a LDAP, Active Directory, SQLite group of users

Built to run itself

It's powered by ClickHouse, the same analytics engine used by some of the largest platforms in the world — but Artica manages it for you:
install, health monitoring, backup and updates are all handled from the familiar Artica web console, fully translated into your language.

In one sentence

See more, keep more, pay less, and catch what matters — enterprise-grade proxy and firewall analytics, sized and priced for a growing business.