---
title: NflowX — the all-inclusive SIEM | Evelcra
description: SIEM, UEBA, SOAR and threat intelligence in one on-premise licence. Free agents, air-gap ready.
---

[![Evelcra](https://go.evelcra.com/hs-fs/hubfs/raw_assets/public/evelcra-theme/images/evelcra-logo.png?width=186&height=34&name=evelcra-logo.png)](https://evelcra.com)

[NormSentry](https://go.evelcra.com/normsentry?hsLang=en) [NflowX](https://go.evelcra.com/nflowx?hsLang=en) [Partners](https://go.evelcra.com/partners?hsLang=en) [Request a demo](https://go.evelcra.com/nflowx#contact)

NflowX · SIEM

# The all-inclusive SIEM. One console, one licence, every discipline.

SIEM, UEBA, SOAR and threat intelligence in one self-managed platform — no add-ons, no per-feature metering, and data that never has to leave your site.

[Request a demo](https://go.evelcra.com/nflowx#contact)   [Become a partner](https://go.evelcra.com/partners?hsLang=en)

**3,437**correlation rules, 395 ATT&CK techniques

**30K+**threat indicators included

**$0**licence cost for agents

## Why buyers are tired of their SIEM

### Six line items, one problem

SIEM, UEBA, SOAR, threat intel, collectors and content — each licensed and metered separately.

### The day-one false-positive flood

Generic rules fire on everything; analysts drown and real attacks hide in the noise.

### The tuning treadmill

A rule-engineering team and a content subscription just to keep the SIEM useful.

### Cloud-tied and hard to run

Regulated and air-gapped sites cannot send their logs to someone else's cloud.

## One platform — not six

### Ingest & search

Free agents, syslog and NetFlow; hot search and tiered archive.

### Correlation

3,437 rules (1,695 on by default) mapped to MITRE ATT&CK.

### UEBA

31 behavioural models with explainable per-user risk.

### SOAR

51 one-click actions: block IP, isolate host, disable account.

### Threat intelligence

30,000+ indicators, GeoIP and on-demand enrichment.

### Compliance reporting

PCI DSS, ISO 27001, HIPAA, GDPR and NIST evidence as signed PDFs.

All included in the base licence, plus passive asset discovery and case management. Optional AI assistant module.

## Detection nobody else ships

### Activation snapshot

Rules only evaluate assets you confirmed — ending the day-one false-positive flood. Patent pending.

### Shared-state rule modes

Live, audit-only or disabled: tune on real traffic without false incidents. Patent pending.

### Licence-bound lifecycle

Correlation keeps running across a renewal gap — no detection blind spot. Patent pending.

## Sized on your events per second

We size NflowX from a sample of your real logs: events per second and retention set the node count, with an optional high-availability peer at a second site. One annual, all-inclusive platform licence — agents are free, in any number.

Fully on-premise and air-gap ready. Trusted in Singapore public-sector and critical-infrastructure environments.

## See it on your own estate

Book a guided walkthrough. We will contact you to arrange it.

**Evelcra Pte. Ltd.** · Singapore · [hello@evelcra.com](mailto:hello@evelcra.com) · [Find a partner](https://go.evelcra.com/partners/directory?hsLang=en) · [Insights](https://go.evelcra.com/insights?hsLang=en) · [Help centre](https://go.evelcra.com/help?hsLang=en) · [Support](https://go.evelcra.com/support?hsLang=en) · [Partner portal](https://go.evelcra.com/portal?hsLang=en)

Trusted in Singapore public-sector and critical-infrastructure environments.

© 2026 Evelcra Pte. Ltd. All rights reserved.