Qimbas: Get answers from the security tools you already pay for.
Qimbas™ shows what your logs really cover, finds the patterns hiding in the noise, models the threats to what you actually run, and tells you where you stand against frameworks like SOC 2, NIS2 and DORA, with the evidence ready for your auditor.
Launching in Q4 2026.
Status: At launch: Azure and Microsoft 365. Next: AWS.
Sound familiar?
You pay to collect security logs, but nobody can say for sure what they cover. A source goes quiet and no one notices. A rule never fires and no one knows why. And when the auditor asks, the evidence is gathered by hand. Again.
What Qimbas does for you
- Finds the gaps: log sources that have gone silent, rules that can never fire, and overlaps that waste your team’s time
- Finds the patterns hiding in the noise, just by asking
- Builds STRIDE threat models from what you actually run
- Shows where you stand against the frameworks you choose, with the evidence ready for the auditor or the board
Find what is easy to miss
Patterns hiding in the noise
Ask about your environment in your own words. Qimbas forms a hypothesis, tests it with live, read-only queries across Sentinel and Defender, and compares the result with a baseline, so anything unusual stands out.
- ‘Which admins were active outside office hours?’
- ‘Where are the unusual sign-ins coming from?’
- ‘Which source suddenly went quiet?’
STRIDE threat models that hold up
Name an application or a subscription, and Qimbas builds a STRIDE threat model from what is actually deployed: network paths, trust boundaries, identities and controls. No whiteboard guesswork.
- Every threat scored for likelihood and consequence, with a recommended fix
- Each threat marked confirmed, assumed or not checked, never padded to fill a table
- Every open finding from your cloud security tools accounted for
- Editable data-flow diagrams, and the evidence behind every claim
See where you stand
Pick the frameworks that matter to you, and Qimbas checks your environment against each one. You see what is in place, what is missing and what needs a closer look, with the evidence attached.
For example
- SOC 2
- CIS Controls v8.1
- NIS2
- DORA
- CRA
- and more
- Your own policies count too, alongside or instead of a framework
- Track progress over time: see what you fixed and what slipped
- Reports in your language and with your logo, ready to hand over
Built to be trusted
- Read-only. Qimbas never changes anything in your environment.
- Every answer shows its source, so you can check it.
- Questions are answered live, and your raw logs are never stored in Qimbas.
- Your data is kept apart from every other customer’s.
Getting started
- Give Qimbas read access through your own app registration
- Choose the sources you want to include
- Run your first assessment
Platforms
- At launch
Azure
Microsoft 365- Next
AWS
Where your data is stored and where the AI runs
Qimbas stores your data within the EU. By default, the AI model is run by a provider that may process and keep data outside the EU/EEA. If you choose EU-only processing, the AI model runs within the EU too.
How Qimbas protects your dataPricing
A monthly subscription, priced by the number of users and the size of your environment. Tell us a little about yours, and we will send you a quote.
The name
In early Ireland, poets sought imbas forosnai – the knowledge that illuminates, a sudden clarity that revealed what was hidden. Qimbas brings the same idea to your security logs: AI that filters the noise and illuminates what matters.