Question 1

What is a13e?

Accepted Answer

a13e is a cloud security platform with two products. Detection Coverage Validator (DCV) maps existing SIEM detections to MITRE ATT&CK across AWS, Azure, and Google Cloud. CloudSigma generates Sigma detection rules from CVE advisories and curated threat intelligence.

Question 2

How is DCV different from a SIEM?

Accepted Answer

A SIEM stores logs and runs your detection rules. DCV does not replace it. DCV reads what is already configured in your SIEM and cloud-native tools, maps each rule to a MITRE ATT&CK technique, and shows where you have coverage and where you have gaps.

Question 3

Which SIEMs and clouds does a13e support?

Accepted Answer

DCV ingests rules from GuardDuty, Security Hub, Microsoft Defender, AWS Config, CloudWatch, and EventBridge across AWS, Azure, and Google Cloud. CloudSigma outputs rules in five formats: Splunk, Microsoft Sentinel, Google SecOps, Elasticsearch, and OpenSearch.

Question 4

Does a13e cover every CVE?

Accepted Answer

CloudSigma generates Sigma rules for CVEs and threat intelligence you provide as input. The underlying gold-rule library covers 168 MITRE ATT&CK techniques across 17 platforms and is curated, not exhaustive.

From obscurity,
to coverage you can prove.

Map your cloud detections to MITRE ATT&CK.

Paste a CVE. Get a validated rule.

Consultancy and software, built by the same people who wrote the rules.

Cloud security architecture

Detection engineering

Threat intelligence

Bespoke security tooling

From obscurity, to coverage you can prove.