Skip to main content
Stratum Labs

About Stratum Labs

We build investigation tools that do not require you to hand over the evidence.

Why this exists

Most security tooling starts by asking for your data. That is a reasonable default for a product company and a terrible one for the person holding an audit log export from a tenant that may already be compromised. The file you most need to analyse is exactly the file you are least able to upload. Stratum Labs exists to close that gap: the analysis happens where the data already is, in your browser, and nothing is transmitted.

How we work

01

Local-first, not privacy-flavoured

Not "we encrypt in transit" or "we delete after 30 days". There is no transit and nothing to delete — after the page loads, our tools make no outbound requests at all. It is verifiable in your browser's network tab in under ten seconds, and we would rather you check than take our word for it.

02

No telemetry, ever

No analytics, no error tracking, no session recording, no fingerprinting. We do not know how many people use our tools or what they do with them. That costs us useful product data, and we consider it a fair price for a tool that handles breach evidence.

03

Detection logic in the open

Every heuristic ships with its exact threshold, window and MITRE ATT&CK mapping, documented in the product. If a tool flags an event, you should be able to explain precisely why to whoever asks.

04

Free things stay free

Corelog is free and will remain free. If we build something commercial, it will be a different product with a different name — not a paywall dropped in front of what already worked.

Where this is going

Corelog covers Microsoft 365 audit logs. The same approach applies to plenty of other investigation sources, and that is what we are working on. We will announce it here when it is real. In the meantime, if you use Corelog in anger and it falls short somewhere, that feedback is the most useful thing you can send us.

Products

Get in touch

For questions, feedback, bug reports or security disclosures, email us directly. We read everything.

hola@stratumlabs.es