Alert triage with a second pair of eyes.

Paste events straight from your SIEM or model the chain by hand: processes, connections, files, registry changes, identity events, emails, upstream alerts.

Triazer reads the chain and writes up what it might be. Every output is advisory, annotated with its own uncertainty, and framed as options with rationale. The analyst decides.

Risk

A score with explicit confidence, and the assumptions it rests on written out.

Questions

What to establish before you escalate, or before you close the ticket.

Scenarios

Up to five distinct ones, each with severity, probability, and evidence for and against.

Actions

Non-destructive next steps, ordered by priority, yours to take or discard.