See Hackers Before They Strike. Let AI Stop Them.
One npm install gives your security team real-time threat detection, AI-powered forensics, automated response, and full attack visibility across every application.
# deploy in 2 minutes
$ npm install securenow
$ node -r securenow/register app.js
[securenow] monitoring 5 apps, 1,247 endpoints
[threat] SQL injection on POST /api/users
IP: 185.220.101.34 · Score: 96/100 · Russia
[action] IP auto-blocked · alert → #soc-alerts
[ai] investigating 3 correlated IPs across Payment API, Auth Gateway
[ai] campaign blocked · forensic summary → dashboard
Stop Fighting Your Tools. Start Stopping Threats.
Most SOC teams juggle siloed dashboards, manually correlate alerts, and still miss critical signals. SecureNow replaces the chaos with a single platform.
An Autonomous Security Agent For Every App
Not just alerts. An agent that detects, investigates, and responds to threats autonomously — while your team focuses on what matters.
Detect
AI analyzes every trace for injection, brute force, bot patterns, and anomalies in real time.
Investigate
Checks IP reputation via AbuseIPDB + internal intel. Correlates across all your apps.
Respond
Auto-blocks IPs, applies rate limits, creates false-positive exclusions. Configurable thresholds.
Notify
Slack, email, PagerDuty, webhooks. Every alert includes full context and AI-generated summary.
Ask Your Security Data Anything
Plain English queries against your entire trace and log warehouse. No SQL. No query language. Ask a question, get an answer, take action.
Show all SQL injection attempts from Russian IPs in the last 24 hours
Found 47 SQL injection attempts from 6 Russian IPs in the last 24h:
| IP Address | Hits | Target | Score |
|---|---|---|---|
| 185.220.101.34 | 18 | POST /api/users | 96 |
| 91.243.44.12 | 12 | GET /search | 91 |
| 45.155.205.78 | 9 | POST /api/auth | 84 |
+ 3 more IPs with lower hit counts. All from AS12389 (Rostelecom).
Did any of these IPs also target our other apps?
Yes — coordinated campaign detected across 3 apps:
All activity happened within a 12-minute window. High confidence: coordinated scan.
Block all 6 IPs across every app and generate a forensic report for the incident
6 IPs blocked across all 5 registered apps
Alert rule created for AS12389 subnet
Forensic report generated → INC-2026-0342
Report includes full attack timeline, payload samples, IP intelligence, and affected endpoints. Exported to your SIEM and shared in #soc-incidents.
Investigate threats, generate reports, and take action — all through natural language.
Try AI Forensics FreeEvery Trace. Every Log. One Platform.
Direct Data Warehouse Access
Run SQL queries against all traces and logs. Build custom reports, export on demand. Your data, your way.
Natural Language Querying
Ask in plain English and get instant results. AI generates and executes the SQL for you.
X-Ray Request View
Drill into any request end-to-end — headers, payloads, timing, and threat signals in one view.
Cross-App IP Filtering
Track any IP across your entire portfolio in one click. Correlate campaigns spanning multiple services.
AI Trace & Log Analysis
AI surfaces anomalies, correlates events, generates investigation summaries. Hours to seconds.
Query Library & Playbooks
Save queries, share playbooks, schedule threat hunts. Turn tribal knowledge into repeatable workflows.
Built for Security Teams. Loved by Developers.
Zero-Code Deployment
Your dev team installs one npm package and sets env vars. No middleware, no wrappers, no code changes. SecureNow auto-instruments at runtime via Node.js preload.
$ npm install securenow
added 1 package in 2.3s
$ node -r securenow/register server.js
[securenow] SDK v3.2.1 loaded
[securenow] tracing: enabled
[securenow] body capture: enabled
[securenow] PII redaction: enabled
[securenow] exporting to: https://otel.securenow.ai
Express server listening on :3000
[securenow] monitoring active — 0 threats detected
Real-Time Threat Detection
AI models analyze every trace for known attack signatures and novel anomalies. Threats are classified, scored, and surfaced in milliseconds.
SOC Dashboard & Forensics
Full visibility into every attack. Drill into any request, trace the attacker across apps, and generate forensic timelines — all from a single pane of glass.
Coordinated attack campaign from Tor exit node. 78 requests across 3 apps in 4 minutes targeting authentication and data endpoints. IP auto-blocked. 2 related IPs flagged for review.
Automated Incident Response
Don't just detect — respond automatically. Configure response actions per threat type. Every action is logged, auditable, and reversible.
Deploy in Minutes, Not Weeks
Your dev team installs the SDK and sets env vars. Your SOC team gets full visibility. No code changes to applications.
Choose your framework and follow the integration steps below.
Install SecureNow + Express
30 seconds30sAdd SecureNow and Express dependencies to your project.
npm install --save securenow expressnpx securenow version
npx securenow helpZero-Effort Setup — Let AI Do EverythingCursor / Claude
After installing, paste this prompt into Cursor Agent or Claude. It will run all the CLI commands, authenticate you (you just confirm the browser login), create your app, and configure your entire project automatically.
Read the @node_modules/securenow package — look at register.js,
tracing.js, cli.js, and the .d.ts type files to understand all config.
Now set up SecureNow in my Express project end-to-end:
1. Run `npx securenow login` — opens my browser for OAuth.
Wait for me to confirm.
2. Run `npx securenow apps create` to register my app
(use my project name, pick default instance).
3. Run `npx securenow apps list --json` to get my APPID & INSTANCE.
4. Create .env using the values from step 3:
SECURENOW_APPID=<from step 3>
SECURENOW_INSTANCE=<from step 3>
SECURENOW_LOGGING_ENABLED=1
SECURENOW_CAPTURE_BODY=1
SECURENOW_NO_UUID=1
SECURENOW_TEST_SPAN=1
5. Create .env.example with placeholder values.
6. Ensure .env and .env.local are in .gitignore.
7. Add "start": "node -r securenow/register app.js" to package.json.
8. Run `npx securenow status` to verify the connection.
I only need to confirm the OAuth login — do everything else automatically.@node_modules/securenow reference gives the AI direct access to the SDK source. You'll only be prompted once — to confirm the OAuth login in your browser.Currently supports Node.js · More languages coming soon
Full SecureNow. Your Data Center.
Complete platform — detection engine, ClickHouse data warehouse, AI models, SOC dashboard — on your infrastructure. Zero data egress. Air-gapped support.
Simple, Transparent Pricing
Dedicated infrastructure for your security data. Every plan includes real-time threat detection, AI forensics, and full CLI/API access.
2 vCPU · 4 GB · 30 GB
For small teams getting started with application security monitoring.
- 500K traces/day
- 7-day trace retention
- 30-day metric retention
- Up to 5 team members
- Real-time detection
- AI forensics
- Email support
4 vCPU · 8 GB · 50 GB
For growing companies that need deeper visibility and longer retention.
- 2M traces/day
- 14-day trace retention
- 30-day metric & log retention
- Up to 15 team members
- Everything in Starter
- Custom alert rules
- Priority support
8 vCPU · 16 GB · 80 GB
For large teams running production workloads at scale.
- 5M traces/day
- 30-day trace retention
- 90-day metric retention
- Up to 50 team members
- Everything in Pro
- Dedicated support & SLA
- Custom integrations
All plans include dedicated instance with TLS. Contact us for enterprise and on-premise pricing.
IP Threat Intelligence Lookup
Check any IP for threat indicators, geolocation, and risk score.
IP Threat Intelligence
Get AI-powered threat analysis, abuse reports, and risk scoring for any IP address
Everything Your Security Team Needs to Know
Attackers Don't Wait. Neither Should You.
One npm install. Real-time threat detection. AI-powered protection. Deploy in minutes.
Start Free Trial