SECURITY ANALYTICS WITHOUT THE NETWORK.

ZERO DEPENDENCIES<200ms PIPELINEAIR-GAPPED

The Challenge

Security analytics in air-gapped environments is extremely difficult without heavy runtime dependencies like ELK or Splunk.

The Solution

Single-binary offline security auditor with built-in statistical detection engines (Z-Score & Markov Chains) — no runtime dependencies required.

Metrics

Binary Deps
0
Latency
<200ms
Detection
3 Engines
Deploy
Air-Gapped

Roadmap

v0 Offline Log Auditor✓ STABLE
v1 Behavioral Detection✓ IMPLEMENTED
v2 Secret Confidence Score● IN PROGRESS
v3 Kubernetes Native Engine○ PLANNED

System Overview

OSA (Offline Security Auditor) is an air-gapped security analytics engine compiled as a single Go binary. It performs log ingestion and statistical anomaly detection without any runtime dependencies, making it ideal for isolated secure zones. It supports real-time streaming and historical batch analysis. Detection engines include Z-Score analysis for statistical outliers and Markov Chain models for behavioral sequential deviations. It reduced false positives by 38% in tests compared to baseline methods.

Evolving into a zero-config, Kubernetes-native security engine, OSA (also known internally as LogShield) automatically detects and masks sensitive secrets (API keys, passwords, PII) in application logs before they are written to disk or shipped to log aggregators. It operates natively inside your cluster without compromising performance.

Capabilities & Modules

  • 01.
    Core Innovation
    Zero-dependency single binary architecture — runs anywhere Go compiles to (<200ms latency).
  • 02.
    Detection Engines
    Statistical anomaly detection using Z-Score, Probability Matrices, and Markov Chains.
  • 03.
    Log Pipeline
    Dual-mode log ingestion pipeline supporting historical backfill and real-time monitoring across 5 sources.
  • 04.
    Target Use Case
    High-security isolated air-gapped environments where cloud SIEMs are inaccessible.
  • 05.
    Secret Confidence Score (SCS)
    Multi-layered detection pipeline using Aho-Corasick automaton, Context Engine, and ML-based Scoring.

    • Frequently Asked Questions

    01. What is OSA?▼

    OSA — Offline Security Auditor designed for air-gapped environments.

    02. What is an offline security auditor?▼

    It's a tool that analyzes security logs without requiring an active internet connection or external APIs.

    03. How does OSA analyze security logs?▼

    OSA uses statistical detection engines including Z-Score and Markov Chains.

    04. Can OSA run without internet?▼

    Yes, OSA is a single-binary application that requires zero runtime dependencies and no internet access.

    05. What makes OSA suitable for air-gapped environments?▼

    Its standalone nature, built-in analytics, and complete lack of external telemetry or API calls.

    06. Who created OSA?▼

    OSA was developed by Rounak Neema for specialized security environments.

    07. What languages is OSA written in?▼

    The primary language for OSA is Go.