9 posts tagged with "Cybersecurity"

Published on: Eventus Engineering Blog (eventus.blog)
Author: Eventus Technologies Engineering Team

In the cybersecurity industry, we have a terrible habit of equating “volume” with “risk.” If a traditional SIEM dashboard shows 10,000 alerts, the status indicator turns red, the posture score plummets to zero, and executives panic.

But as any Tier-1 SOC analyst knows, a simple automated port scan against a public-facing IP can generate 5,000 raw firewall drops in three minutes. That isn’t 5,000 separate critical threats; it is a single, low-level event.

When we built SIEM+ (siem.plus), we knew that if we just fed raw alert counts into a UI, we would be recreating the exact same “alert fatigue” we set out to destroy. We needed a way to translate noisy data lakes into a boardroom-ready metric that reflects actual risk.

Here is a deep dive into how we engineered the SIEM+ Dynamic Posture Score, our penalty decay algorithm, and how we force LLMs to map threats to compliance frameworks without hallucinating.

Eventus is pleased to announce that we have joined Qiita, Japan's technology knowledge-sharing platform, to make our practical experience more accessible to engineers, IT teams, and technology leaders.

Qiita gives us a place to share what we learn while helping organizations improve security operations, use cloud technologies effectively, and turn operational data into better decisions.

Eventus K.K. (イベントス株式会社) was pleased to attend TECH BEAT Shizuoka 2026, a platform that brings together businesses in Shizuoka and startups to create new value through collaboration and open innovation.

At the event, we showcased two solutions that help organizations make better use of the data already flowing through their operations: SIEM+ for security visibility and response, and SEKHMET for IoT data collection and application development.

For IT Directors, CISOs, and Security Operations Managers, the challenge is no longer whether the organization has enough security tools. The real challenge is whether a lean team can turn thousands of daily signals into the few decisions that truly matter.

Modern environments generate alerts from firewalls, endpoints, identity platforms, Microsoft 365, cloud workloads, SaaS applications, and network infrastructure. Many of those alerts are low-fidelity. Some are duplicates. Some are known false positives. A small number may indicate real business risk.

This is where SIEM Plus from Eventus comes in. SIEM Plus combines Devo's cloud-native SIEM with Eventus managed services, AI-enhanced noise reduction, and actionable ITSM workflows to help teams conquer alert fatigue without building a large internal SOC from scratch.

Hong Kong's cybersecurity landscape is undergoing a major shift with the introduction of the Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653). Under this regulation, Critical Infrastructure Operators (CIOs) must meet strict statutory obligations regarding organizational governance, preventive security measures, and prompt incident response.

At Eventus, we partner with Devo to deliver a unified SIEM and security data platform that helps organizations maintain continuous visibility, streamline investigations, and achieve full compliance with Cap. 653.