Alerts in with full PII.
Only tokens ever leave.
Two-way tokenization for alert intelligence. Your sensitive data never lands in logs, notifications, or LLM prompts.
01 / 03 — Tokenization
Built to never see your data.
Payloads are encrypted at our edge and tokenized before they touch any downstream system. Log lines, notifications, and LLM prompts see placeholders only — rehydration is scoped to authenticated users with matching tenant scope.
How tokenization worksTokenized (Culprit)
alert: auth_failure host: <HOST_a3f9> user: <USER_c44b> ip: <IP_b217> path: /api/<ROUTE_d8e>
c4a81b. Token validator rejects requests issued > 30s ago.02 / 03 — Correlation
AI clusters noise into incidents.
Correlation happens on tokenized events, so the model never sees raw customer names, IP addresses, or ticket contents. You see a single incident with a ranked root-cause summary — not a page of alert notifications.
03 / 03 — Pricing
$49 per service, flat.
No usage caps, no overage, no surprise bills the week an outage doubles your event count. The more data you send, the more value you get — not more cost.
per service · per month
Flat · No overage · No caps
04 — Frequently asked
Questions we answer on every call.
$49 per service per month, flat. No usage caps, no overage fees, no tier jumps. We bill for the connection, not the data volume.
Culprit is architected for SOC2 Type II and HIPAA obligations — two-way tokenization, tenant isolation, and encrypted vaulting are built in. We are not yet certified/attested. Our attestation roadmap and a BAA template are available on request.
Point your existing alerting tools at our ingest endpoint — anything that can POST JSON over webhook. Setup runs ~15 min per service.
Encrypted payloads live in a vault. We store tokenized copies of events for correlation and display. Your PII never leaves your namespace in plaintext — not to logs, not to notifications, not to LLMs.
Flat pricing, compliance-first architecture, and AI correlation as a native capability rather than a paid add-on. Existing platforms treat compliance as a checklist; we treat it as the starting constraint.
Form 05 — Pilot application
Request pilot access
60 seconds. We review every request.
build 0ebe0a4updated 2026-04-20no trackersno analyticsno third-party scripts