Score any behavioral event against your baseline.
POST /v1/anomaly/score
Behavioral baselines and deviation scoring. Send any event — API call, login, data access, network request — and get back a deviation score, confidence level, and the specific behaviors that triggered the anomaly.
Everything you need
A complete solution — from discovery to enforcement to response.
Automatic Baseline Learning
AlektroAI learns normal behavior from your historical traffic automatically. No manual threshold setting required.
Time-Series Storage
Baselines are stored in InfluxDB / TimescaleDB for efficient querying. Query your own baseline data via the API at any time.
Deviation Scoring
Each event gets a 0–100 deviation score. Set your own threshold for alerting — tune sensitivity per entity type.
Vector Similarity Matching
Novel threats that do not match known patterns are caught via vector similarity search using Pinecone / Weaviate embeddings.
Burst Handling
Built to handle DDoS-level traffic spikes and incident surges without latency degradation. Kafka-backed async mode for bulk scoring.
Configurable Sensitivity
Tune sensitivity per entity type — user, service account, API key. Reduce noise for known automation, increase sensitivity for privileged access.
Built for your team
Insider Threat Detection
Score user behavior against their personal baseline — catch data exfiltration and privilege escalation early.
API Abuse Detection
Detect abnormal API consumption patterns — rate spikes, unusual endpoint sequences, and credential stuffing attempts.
Fraud & Account Takeover
Combine with /v1/auth/risk to build layered fraud detection — anomalous behavior plus risky login signals together.
Service Account Monitoring
Establish baselines for service accounts and CI/CD pipelines — alert the moment behavior deviates from expected patterns.
Start building with the AI Security API
Join hundreds of engineering and security teams who rely on AlektroAI for real-time threat detection and compliance.
