AI Agents Are Powerful.
That's the Problem.
AI agents like Cursor, Claude Code, and Copilot run on your machine with shell access, network access, and file access. They can read your SSH keys, hit unexpected endpoints, modify CI configs, and escalate privileges — often in ways that look completely benign to traditional security tools.
Correlic was built to close that gap. We hook directly into your OS kernel — eBPF on Linux, ETW on Windows, kqueue on macOS — and understand what AI agents are actually doing, not just what they claim to be doing.
Design Principles
Security-First Sampling
AI agent events bypass sampling entirely. Suspicious patterns are always kept. Security is never sacrificed for performance — every meaningful event reaches your detection engine.
Correlation at Core
Dual-database architecture: PostgreSQL for time-series events, Neo4j for process relationship graphs. Every event is mapped by agent session and process ID — this is what Correlic is named for.
Behavioral Learning
The system learns what's normal for each AI agent and adapts over time. Manually baseline expected behavior or let auto-learning handle it. Noise decreases continuously while threat visibility stays complete.
BYOK Privacy
Bring your own LLM API key for AI-powered analysis. Your data never leaves your infrastructure. Keys encrypted with AES-256-GCM — we never see them.
Why Correlic
Catches Slow Attacks Other Tools Miss
Most tools only see the last few minutes. Correlic tracks agent behavior from 1-minute snapshots to yearly trends — catching threats that unfold over days or weeks, not just fast bursts.
Zero Noise From Background Processes
Detection rules only fire on AI agent activity. System daemons and human actions never trigger alerts — so every finding is worth your attention. No tuning required.
Connects the Dots Across Attacks
A single file read is a data point. Credential theft followed by exfiltration is a threat. Correlic links individual events into multi-step attack patterns automatically — so you see the full picture, not isolated alerts.