📊 Unified SOC dashboard
Severity-colored event timeline, threat-map of source IPs, MITRE ATT&CK heatmap, and a real-time AI summary card - all on one screen.
PIPEDA + NIST-aligned - 100% Canadian data residency
See every threat, across every Maple app and cloud - in one Canadian SOC.
MapleSIEM is a Canadian-hosted security information and event management platform with AI-driven threat detection, MITRE ATT&CK mapping, and audit-ready PIPEDA + NIST exports. Real-time anomaly summaries, signed audit trails, and flat per-site CAD pricing.
Everything a Canadian SOC needs - without the SIEM tax
Log ingestion, AI threat detection, MITRE ATT&CK mapping, and audit exports in one Canadian-hosted product. No per-GB ingest fees and no query language to learn.
🤖 AI threat summaries
Pro and Business plans cluster anomalies into plain-English narratives like "3 anomalies in past 24h - 1 critical: brute-force on auth from 5 IPs."
🎯 MITRE ATT&CK mapping
Every detection is tagged with tactic + technique IDs. Quarterly heatmap reports show coverage across the full matrix on the Business plan.
🔒 Signed audit trails
Tamper-evident JSON manifests, PDF evidence packages, and CSV dumps. Recurring scheduled audit packages on Pro and above.
🌏 20+ log source integrations
AWS, Azure, Google Workspace, Office 365, Cloudflare, Fortinet, pfSense, Linux syslog, Windows Event Forwarder, Okta - and all Maple apps.
📍 100% Canadian data residency
Every event, alert, and audit log lives inside Canadian datacenters. No replication to U.S. infrastructure - PIPEDA and NIST-aligned by default.
AI-drivenThreat summaries
MITRE ATT&CKMapped detections
100% CAData residency
PIPEDA + NISTAudit-ready
7-yearCold archive
From raw logs to a working SOC in four steps
Most teams are ingesting their first events and seeing MITRE-tagged detections the same day they sign up. No query language to learn, no per-GB ingest surprises.
-
1
Create your MapleSIEM site
Sign up and spin up a site in minutes. You get a Canadian-hosted collector endpoint and an API key right away. No credit card for the trial.
-
2
Point your log sources at it
Forward AWS, Azure, Microsoft 365, Cloudflare, Fortinet, syslog, Windows events, Okta - and every Maple app - using the 20+ prebuilt parsers.
-
3
Watch detections light up the SOC
Prebuilt rules start tagging events with MITRE ATT&CK tactics and techniques immediately. AI threat summaries cluster anomalies into plain English.
-
4
Export audit-ready evidence
Generate signed PDF evidence packages, tamper-evident JSON manifests, and PIPEDA + NIST-aligned reports on demand or on a recurring schedule.
In the wild
See it in action
Security monitoring and incident response for Canadian SMBs.
How we stack up
MapleSIEM vs. Splunk, Elastic SIEM, Wazuh
Canadian-hosted and billed in CAD, with AI threat summaries and audit packages built in - no per-GB ingest meter and no query language to learn. Competitor details are illustrative and approximate.
| Feature | MapleSIEM | Splunk | Elastic SIEM | Wazuh (self-host) |
|---|---|---|---|---|
| Canadian data residency (PIPEDA) | DIY | |||
| CAD billing, no FX fees | USD | USD | Free / DIY | |
| Flat per-site pricing | Per-GB ingest | Per-GB / node | Self-host cost | |
| Query language to learn | None | SPL | KQL / EQL | OpenSearch DSL |
| AI threat summaries | Add-on | Add-on | ||
| MITRE ATT&CK mapping | Built in | |||
| Audit packages (PIPEDA + NIST) | Built in | DIY | DIY | DIY |
| Managed / no-ops hosting | Cloud tier | Cloud tier | ||
| Starts at | $49 CAD / mo / site | $$$ USD | $$ USD | Free + your time |
Competitor names are trademarks of their respective owners. Comparison reflects typical offerings and is provided for illustration only.
SOC in motion
Logs flowing, rules firing, threats enriched.
A peek at the kinds of activity flowing through a MapleSIEM site on a typical day. Illustrative; sites and details anonymized.
Live activity
last 30 sec
0
Prebuilt log-source parsers
0%
Canadian data residency (PIPEDA)
0
Cold-archive retention (Enterprise)
Simple Canadian pricing
Flat per-site pricing in CAD - no per-GB ingest fees, no per-host charges. Cancel any time. Charity rate available - email support@mapleworksuite.com.
Starter
$49 CAD / mo / site
For small teams getting their first SOC visibility.
- 5,000 events/day
- 30-day hot retention
- 10 prebuilt detection rules
- Email + Slack alerts
- MITRE ATT&CK tagging
Pro
$99 CAD / mo / site
For growing ops + IT teams who need real-time SOC.
- 50,000 events/day
- 90-day hot retention
- Unlimited custom rules
- AI threat summary (daily)
- PIPEDA + NIST audit exports
Business
$249 CAD / mo / site
Most popular for SMBs with compliance pressure.
- 250,000 events/day
- 1-year hot retention
- AI threat summary (real-time)
- External SIEM connector included
- Quarterly audit packages
- Priority response SLA
Enterprise
$499 CAD / mo / site
For regulated industries and multi-site deployments.
- Unlimited events/day
- 3-year hot + 7-year cold retention
- Custom MITRE detection packs
- SSO + SAML + dedicated CSM
- On-prem collector option
- NIST 800-53 mapped reports
Frequently asked questions
Common questions about MapleSIEM. Have something else? Email support@mapleworksuite.com.
What is MapleSIEM?
MapleSIEM is a Canadian-hosted security information and event management (SIEM) platform with AI-driven threat detection, MITRE ATT&CK mapping, and audit-ready PIPEDA + NIST exports. It ingests logs from your Maple apps, cloud providers, firewalls, endpoints, and identity systems, then surfaces real-time anomalies in a single SOC dashboard.
How is MapleSIEM different from Splunk, ELK, or Datadog Security?
MapleSIEM gives you the practical 80% of Splunk or Datadog Security without per-GB ingest fees or a query language to learn. It is preconfigured for SMB and mid-market workloads, hosts every byte inside Canada, and flat-prices per site instead of per host or per ingest GB. Unlike open-source ELK, you do not run any infrastructure yourself.
What log sources does MapleSIEM support?
Out of the box: every MapleWorkSuite app, AWS CloudTrail, Azure Activity + Entra ID, Google Workspace, Office 365 + Defender, Cloudflare, common firewalls (Fortinet, Palo Alto, pfSense), Linux syslog, Windows Event Forwarder, Okta, JumpCloud, and any source that can push syslog or webhooks. Custom parsers are available for Pro and above.
How does the AI threat detection work?
Pro and Business plans include an AI threat summary that clusters anomalies (failed logins, privilege escalations, unusual exfil patterns, MITRE technique chains) into plain-English narratives. For example: "3 anomalies in past 24h - 1 critical: brute-force on auth from 5 IPs in Eastern Europe targeting admin@example.ca." Every alert links back to the raw events so analysts can verify, not just trust the AI.
Does MapleSIEM map detections to MITRE ATT&CK?
Yes. Every prebuilt detection is tagged with the relevant MITRE ATT&CK tactic + technique IDs (e.g. TA0006 Credential Access, T1110 Brute Force). Custom rules let you add your own tags. The Business plan ships with quarterly heatmap reports showing your coverage across the full MITRE matrix.
Is MapleSIEM PIPEDA and NIST compliant?
MapleSIEM is built for Canadian compliance: 100% Canadian data residency, signed audit trails, PIPEDA-aligned retention controls, and NIST 800-53 + CSF mapped reports on Enterprise. Pro and above can export evidence packages directly for auditors. We do not certify your business, but auditors find the trails clean and signed.
What retention and audit exports does MapleSIEM provide?
Retention scales by plan: 30 days hot on Starter, 90 days on Pro, 1 year on Business, and 3 years hot + 7 years cold on Enterprise. Audit exports include PDF evidence packages, CSV event dumps, signed JSON manifests, and a MITRE coverage heatmap. Pro and above can schedule recurring audit packages by email.
How much does MapleSIEM cost in CAD?
Per-site flat pricing: Starter $49, Pro $99, Business $249 (most popular), and Enterprise $499 CAD per month per site. No per-GB ingest fees, no per-host charges, and no annual commitment required. All plans include MITRE ATT&CK tagging and PIPEDA-aligned retention controls.
Ready to spin up a Canadian SOC in under an hour?
Start ingesting logs, mapping MITRE detections, and exporting audit packages today. No credit card required for trial.
Get started with MapleSIEM