Frequently asked questions
Quick answers about the platform, deployment, data and licensing.
About the platform
Do we need to replace our existing SIEM or EDR?
No. CyberWall can ingest from and act through your existing tools. Many customers start alongside their current SIEM and migrate over time.
Can we buy one module at a time?
Yes. Every module works on its own. Most customers start with the Integrated SOC or OXDR and add modules later.
How is CyberWall different from a SIEM?
A SIEM stores and correlates logs. CyberWall adds behaviour analytics, response automation, offensive validation and compliance on one data model.
Which languages does the platform support?
The platform and reports are available in Arabic, English and French.
Deployment and data
Can CyberWall run on-premises?
Yes. You can deploy in the cloud, on-premises (including air-gapped sites) or in a hybrid model.
Where is our data stored?
In the region or data centre you choose. Single-tenant deployments keep your data separate from other customers.
Is our data used to train AI models?
No. Your data is not used to train models for other customers.
How long does onboarding take?
Priority sources and core detections are usually live within the first weeks; full coverage follows in stages.
Licensing and support
How is CyberWall licensed?
Licensing depends on the modules you choose and the size of your environment. Contact us for a quote.
Do you offer managed services?
Yes. CyberWall MDR provides 24/7 monitoring, response and exposure management.
Can partners resell CyberWall?
Yes. See the Partner Program for channel, MSSP, consulting and technology partnerships.
Bring one real incident. We will walk it through CyberWall.
A working session with our engineers, built around your sources, your alerts and the questions your SOC is asking today.