Skip to content

xenXDRby FluenceSecurity

Sign in Book a demo

/

Getting started

Introduction
Overview
Requirements and sizing
Install with Docker Compose
Single sign-on
First hour checklist
Production hardening checklist

Endpoint agent

Introduction
Overview
Supported platforms
Install on Windows
Install on Linux
Installer bundles and enrolment
Telemetry
Live response
Network isolation
Application control
Quick triage
Updates
Troubleshooting the agent

Data sources

Introduction
Overview
Ingest keys
Beats
Syslog, CEF and LEEF
HTTP JSON
Splunk HEC
Data source catalog
Connectors
Threat intelligence

Search

Introduction
Logs page tour
Query syntax
Keyboard shortcuts
Saved views and search tabs
AI Hunt
Field dictionary

Detections

Introduction
Overview
Writing rules
Importing rules
Content pack
Exceptions and suppressions
ATT&CK coverage
Baseline signals

Operations

Introduction
Alerts
Correlations
Cases
Case categories
SLA
Reports
Tickets
Notifications
Dashboards

AI

Introduction
Overview
Triage verdicts
Investigation agent
Notes, handovers and report drafts
Model setup
Feedback

Automation

Introduction
Playbooks
The workflow builder
Block reference
Modes and ceilings
Response actions
Egress and notifications
Playbook runs

Fleet

Introduction
Hosts
Risk score
Response console

Administration

Introduction
Organizations
Users and roles
Audit log
Retention
Backups and restore
Upgrades
Monitoring the deployment
Scaling
Settings reference

Customer portal

Introduction
Overview
Inviting customers
What customers see
Portal security

Reference

Introduction
Glossary
Support tiers
Compatibility
Notification kinds
Data source catalog (reference)
Release notes

Docs
Data sources
Connectors

Connectors

Pull connectors XenXDR polls on your behalf.

Live today: Okta System Log and Microsoft Entra ID and Microsoft 365. Configurable but not yet collecting: the coming soon list.

PreviousData source catalog NextOkta System Log

xenXDRby FluenceSecurity

A FluenceSecurity product
Made in Gdańsk, Poland

GitHub
LinkedIn
X

Platform

Platform overview
SIEM and search
Endpoint agent
Detections
AI triage
Playbooks and response
Alerts, cases and reports
Multi-tenancy and access
Customer portal
Integrations

Solutions

For security teams
For MSSPs
Managed SOC by FluenceSecurity

Resources

Documentation
Why XenXDR
Security and trust
Changelog
Pricing

Company

fluencesecurity.com
About FluenceSecurity
MDR service
Blog
Contact

Legal

Privacy policy
Cookie policy
Website terms
Software licence terms
Data processing
Service levels
Company details
Accessibility
Vulnerability disclosure
Subprocessors

© 2026 FluenceSecurity. All rights reserved.Sigma, Splunk, Okta, Microsoft, Fortinet and other marks belong to their respective owners.