Investigation chat
An AI agent queries Wazuh with read-only tools, analyzes vulnerabilities, and consults two distinct knowledge bases: NIS2 regulation and company procedures.
AI-assisted security operations
Investigate security events with an AI agent.
SHIVA helps analysts investigate Wazuh findings, review vulnerability and infrastructure evidence, and consult NIS2 and company documentation, from a single interface.
Watch the demoDemo
What it does
Monitoring
Summary dashboards for agents, alerts, and vulnerabilities from Wazuh.
NIS2
Overview, requirements, and reporting, with coverage calculated from the technical and organizational evidence collected.
Tickets and documents
Manage tickets, comments, and company documents, which feed the knowledge base used by the agent.
SIEM integrations are read-only. Risk signals and NIS2 mappings are evidence for review, not automated compliance determinations.
Who it is for
- Security teams and SOC analysts who use Wazuh and want to investigate findings and vulnerabilities faster.
- Organizations subject to NIS2 that need to connect technical evidence and company documentation to the requirements.
Built on AWS
SHIVA uses AWS managed services for AI and for the application platform.
Amazon Bedrock
The foundation models that power the investigation agent.
Amazon Bedrock AgentCore
Runtime and Gateway that run the agent and the MCP tools for Wazuh.
Knowledge Bases for Amazon Bedrock
The knowledge bases for NIS2 regulation and company documents.
Amazon EKS and Amazon S3
EKS hosts the interface, API, and workers; S3 stores company documents.