# SecureNow — Full LLM Context

> SecureNow is an application security platform purpose-built for security operations center (SOC) teams. It provides real-time threat detection, AI-powered forensics, automated incident response, and security monitoring for web applications. Built on OpenTelemetry and ClickHouse, SecureNow ingests application trace data and enables SOC analysts to detect attacks like credential stuffing, brute force, API abuse, injection attacks, and automated scanning — then investigate and respond in minutes.

## What SecureNow Does

SecureNow monitors web applications in real time by ingesting OpenTelemetry trace data into ClickHouse for high-performance security analytics. SOC analysts use SQL-based alert rules, AI-powered investigation, false positive management, and structured notification triage workflows to detect and respond to threats targeting their applications.

### Key capabilities

- Real-time threat detection using SQL queries against OpenTelemetry trace data
- AI-powered investigation that reduces manual triage from 30 minutes to seconds
- False positive management with AI-suggested exclusions and test-before-apply workflows
- Structured notification triage with status lifecycle and full audit trails
- Multi-channel alerting via Email, Slack, and in-app notifications
- Security forensics with natural language and SQL querying against historical trace data
- Automated IP blocking and remediation rules
- Firewall with HTTP-403 blocking, TCP drop, and iptables layers
- Free-tier firewall with 500k+ known-bad IPs refreshed hourly

### Integration

- One npm install: `npm install securenow`
- OpenTelemetry-based auto-instrumentation for Node.js, Next.js, Express, Fastify, Nuxt, NestJS
- Automatic body capture, IP extraction, user-agent fingerprinting, geolocation
- Vanilla SDK for self-hosted environments (EC2/PM2)
- Works alongside existing APM/SIEM stacks (Splunk, ELK, Datadog)

## Platform Pages

- [SecureNow Platform](https://securenow.ai): Main landing page
- [For SOC Teams](https://securenow.ai/security): Security Operations Center-focused edition
- [For DevSecOps](https://securenow.ai/devsecops): Developer-focused edition
- [Firewall](https://securenow.ai/firewall): Free-tier firewall with known-bad IP blocking
- [Integration Guide](https://securenow.ai/integration-guide): Step-by-step setup
- [Blog](https://securenow.ai/blog): Application security insights, attack case studies, and practical tutorials
- [Contact](https://securenow.ai/contact): Sales and support

## Authenticated Dashboard

The SOC dashboard at `https://app.securenow.ai` provides:

- Alert Rules: SQL-based detection rules with cron scheduling, throttling, and multi-channel delivery
- Notification Triage: Structured notification queue with severity filtering, status workflows, and AI investigation
- False Positive Management: AI-suggested exclusion patterns with test-before-apply workflows
- Forensics Query Engine: Natural language and SQL queries against ClickHouse trace data
- Blocklist Management: IP blocklist management for automated threat response
- Automation Rules: Automated response rules for common threat patterns
- AI Investigation Reports: AI-generated IP investigation reports with verdicts, risk scores, and recommendations

## About SecureNow

SecureNow is an application security platform for SOC teams that combines OpenTelemetry trace data, AI analysis, and SQL-based detection rules to help security teams detect and respond to application-layer attacks in minutes.

- Website: https://securenow.ai
- Dashboard: https://app.securenow.ai
- Contact: contact@securenow.ai
- Blog: https://securenow.ai/blog