Federated Detection

Federated detection is a security architecture in which detection rules and logic execute within the environments where data lives, AWS, Azure, on-premises data centres, rather than requiring all log data to be ingested into a central SIEM. Only the resulting alerts, not raw log data, are forwarded to a central investigation or correlation platform. This architecture addresses a specific Japan FSI constraint: regulatory and contractual data residency requirements prevent many organisations from routing endpoint telemetry and log data offshore. Federated detection keeps raw data local while still enabling centralised investigation. Prophet Security’s platform is built around this model.