Skip to main content

The Fluency Logic Layer: A Headless SIEM

Support
Fluency Support

Fluency is introducing the Fluency Logic Layer™, an architecture built for AI-assisted operations. It turns security expertise — investigation procedures, behavioral analytics, reporting methods and operational workflows — into governed capabilities that AI assistants such as Claude, Codex and ChatGPT, as well as analysts, MSSPs and automation, can call directly.

The Logic Layer is available now as part of the Fluency platform.

Why headless​

A SIEM has always exposed its data through dashboards, searches and reports, and relied on trained analysts to turn that data into answers. AI assistants change how people work with software: more and more, security staff ask an assistant a question instead of navigating an interface. But an assistant needs more than access to data. It needs the expertise and procedures that govern how the work should be done.

The Logic Layer separates that expertise from the user interface and builds it into the platform. Instead of knowing where data lives and which queries to run, you ask for an outcome:

  • What attack techniques became more prevalent this month compared with last month, and how do they map to MITRE ATT&CK?
  • Which security controls generate the most analyst effort for the fewest meaningful outcomes?
  • What changes in user behavior contributed most to risk-score increases this month?
  • Which detection gaps are most likely to affect our ability to identify ransomware activity?
  • Summarize the most significant changes in our security posture over the last 90 days and explain their business impact.

Governed, not open-ended​

The AI decides which capability to call. The Logic Layer governs how data is accessed, how the analysis is performed, and how the result is delivered, so answers stay consistent, auditable and within each user's permissions.

Built on your expertise as well as ours​

The Logic Layer carries Fluency's own security-operations methods, and MSSPs and enterprises can add theirs: service methodologies, investigation procedures, reporting standards and customer-specific practices become reusable capabilities available to their analysts, customers and AI clients.

Getting connected​

  • MCP server. Each instance serves an MCP endpoint that Claude, Codex and other MCP clients connect to. See MCP Server for the connection steps.
  • Skills. Ready-made skills for common tasks are open source in the ingext_skills repository.
  • Clients. Claude Co-Work, Claude Code and Codex are supported.
Splash Summary

Fluency is introducing the Fluency Logic Layer™, an architecture built for AI-assisted operations. It turns security expertise — investigation procedures, behavioral analytics, reporting methods and operational workflows — into governed capabilities that AI assistants such as Claude, Codex and ChatGPT, as well as analysts, MSSPs and automation, can call directly.

The Logic Layer is available now as part of the Fluency platform.