Built for analysts. Every score is explainable.

The platform

Built for analysts. Every score is explainable.

Qato turns behavioral baselines into something an analyst can act on — a clear picture of the fleet, a full breakdown behind every score, and the evidence behind every detection.

Qato dashboard showing fleet health, active detections, and anomaly trends
Dashboard

Your whole fleet, at a glance.

Fleet health, active detections, and anomaly trends in one view — so analysts start the day knowing exactly where to look.

  • Fleet health and active detections in one place
  • Anomaly trends over time
Qato anomaly detail breaking down which facets deviated and how each score was calculated
Anomaly detail U.S. Pat. 9,866,578

No black boxes.

Every alert breaks down which behavioral facets deviated, by how much, and exactly how each score was calculated — the patented scoring, shown in full.

  • Per-facet deviation, weighted by importance
  • The full calculation behind every anomaly score
Qato detection view linking recurring anomalies on a host to captured evidence
Detection & evidence

From anomaly to evidence in one click.

Detections track recurring anomalies on the same host over time, and every event links straight to the captured evidence behind it.

  • Recurring anomalies grouped per host over time
  • Each event links to captured processes, connections, and events
Product walkthrough

See it in action.

A guided tour of the Qato console — from the fleet dashboard to anomaly detail to the captured evidence behind every detection.

Patented technology

U.S. Patent 9,866,578

System and method for network intrusion detection anomaly risk scoring

The anomaly risk-scoring engine at Qato’s core is protected intellectual property — a defensibility claim no signature-based tool can make. An attacker can study a public signature database; they can’t design around what Qato has patented about your network.

Specifications

Built to run where you operate.

Broad OS support, federal-grade security, and fully air-gapped deployment — no cloud dependency required.

Platforms

  • RHEL 8, 9, and 10
  • Windows Server 2016, 2019, 2022, and 2025
  • Windows Desktop 10 and 11

Security

  • FIPS 140-3 compliant cryptography (OpenSSL FIPS Provider)
  • Mutual TLS (mTLS) agent–server communication
  • Role-based access control (RBAC)
  • OIDC, SAML, and LDAP authentication
  • Full audit logging

Deployment

  • Air-gapped deployment supported
  • Ships as an offline package with all components
  • No cloud dependency required
  • IPv4 and IPv6

Pricing & how to buy: Qato is priced per user, per year. Contact our sales team for pricing and purchasing details via the Get Started link below.