Log Storage.
Audit-Ready.
EU-Native.
Eye Log is the log history you'll need, already stored and ready. No SIEM. No new tools. No compliance risk.
12
months of log retention
24h
Hot storage retrieval SLA
100%
EU-based log storage
0
new tools to run
The challenge.
Most organisations are forensically blind for several months of the year
NIS2, ISO 27001, and DORA all expect organisations to maintain effective logging and monitoring as part of their broader risk-management responsibilities.
Cyber insurers increasingly ask for proof of long-term log retention at renewal. If you cannot demonstrate it, your coverage conditions and your premiums may be affected.
When an attack began months earlier, investigations stall. Without historical logs, root cause remains unclear and incident resolution slows down.
And the typical market answer “deploy a SIEM” creates a new problem:
A complex, costly infrastructure project that requires specialised staff most midmarket IT teams don’t have.
NIS2, ISO 27001, and DORA all expect organisations to maintain effective logging and monitoring as part of their broader risk-management responsibilities.
Cyber insurers increasingly ask for proof of long-term log retention at renewal. If you cannot demonstrate it, your coverage conditions and your premiums may be affected.
When an attack began months earlier, investigations stall. Without historical logs, root cause remains unclear and incident resolution slows down.
And the typical market answer “deploy a SIEM” creates a new problem:
A complex, costly infrastructure project that requires specialised staff most midmarket IT teams don’t have.
The challenge.
Eye Log: 12-month log storage built into Cyber Guard

Eye Log is the log storage that sits directly alongside Cyber Guard. When an auditor asks for September’s logs, they exist. When an incident turns out to have started six months ago, the evidence is already in the hands of the analysts who need it. You are getting value from day one.
Eye Log delivers the compliance and forensic readiness outcome without the cost, complexity, or overhead of a SIEM project.
Eye Log Packages.
Eye Log Comply
12 months of cold storage with a 48-business-hour retrieval SLA, designed for organisations that need audit-ready log records without the cost or complexity of running a SIEM.
Key Outcomes
- Log retention requirements met from day one
- 12-month log record available for auditors, insurers, and regulators
- Compliance gap closed without internal headcount or infrastructure investment
- Predictable monthly cost charged per GB usage
Eye Log Hybrid
30 days of hot storage plus 11 months of cold storage, with a 24-business-hour retrieval SLA for hot data and 48-business-hour SLA for cold. Built for higher-risk environments and sectors where active incidents require fast access to historical data for forensic reconstruction alongside compliance coverage.
Key Outcomes
- Historical investigation during active incidents, without hitting a retention wall
- Regulatory requirements met across the full retention period
- Faster forensic reconstruction when an incident turns out to have started months earlier
- No SIEM infrastructure required
Key benefits
What your organisation gains from day one
Close the audit gap
Answer the insurance question
Accelerate forensic investigation
Features
What’s included in Eye Log
the European Union, addressing data
sovereignty requirements under GDPR
and supporting NIS2 and DORA
compliance postures.
before the 12-month retention period
ends. The record that exists at
investigation time is the same one that
was written at ingestion.
access to all log data for security
operations, incident response, threat
hunting, and forensic investigation.
retrieval (5 per year)
(up to 10 GB each) via the Eye Portal
or your dedicated Customer Success
Manager.
sources via syslog and Azure Event
Hubs, covering firewalls, servers, cloud
services, identity providers, and
network infrastructure.
consumption through the Eye Portal.
Clear, at-a-glance visibility into your
retention posture.
during onboarding by Eye Security's team. Your IT team does not need to architect the integration.
the European Union, addressing data
sovereignty requirements under GDPR
and supporting NIS2 and DORA
compliance postures.
before the 12-month retention period
ends. The record that exists at
investigation time is the same one that
was written at ingestion.
access to all log data for security
operations, incident response, threat
hunting, and forensic investigation.
retrieval (5 per year)
(up to 10 GB each) via the Eye Portal
or your dedicated Customer Success
Manager.
sources via syslog and Azure Event
Hubs, covering firewalls, servers, cloud
services, identity providers, and
network infrastructure.
consumption through the Eye Portal.
Clear, at-a-glance visibility into your
retention posture.
during onboarding by Eye Security's team. Your IT team does not need to architect the integration.
How it works.
Up and running in hours.
Eye Log is built to be invisible to your team once it is running. Here is what the process looks like.
Choose Eye Log Comply or Eye Log Hybrid based on your retrieval and forensic investigation needs. Pricing is confirmed per daily log volume tier, no hidden fees.
Once live, log data is continuously ingested and stored in Eye’s EU-based infrastructure. Eye Log Hybrid routes the most recent 30 days into hot storage for immediate SOC access. All data moves to cold storage at the appropriate point.
Our analysts can query your logs at any time, during active incidents or forensic investigations. There is no request process for the SOC. The data is already in their hands.
When you need to produce evidence for an auditor, insurer, or internal review, request a retrieval through the Eye Portal or contact your Customer Success Manager. Delivered within 24 or 48 business hours depending on your tier.
Choose Eye Log Comply or Eye Log Hybrid based on your retrieval and forensic investigation needs. Pricing is confirmed per daily log volume tier, no hidden fees.
Once live, log data is continuously ingested and stored in Eye’s EU-based infrastructure. Eye Log Hybrid routes the most recent 30 days into hot storage for immediate SOC access. All data moves to cold storage at the appropriate point.
Our analysts can query your logs at any time, during active incidents or forensic investigations. There is no request process for the SOC. The data is already in their hands.
When you need to produce evidence for an auditor, insurer, or internal review, request a retrieval through the Eye Portal or contact your Customer Success Manager. Delivered within 24 or 48 business hours depending on your tier.
Use cases
Built for the moments that matter most
The audit question you are not ready for
Cyber insurance renewal
Incident response that can reach back as far as the evidence goes
Trust & Compliance.
EU-Stored. Audit-ready. No compliance project required.
Eye Log is built on the same secure, EU-native infrastructure that underpins the entire Eye Security platform. Your log data stays exclusively within the European Union, protected from modification, and backed by the certifications and controls your auditors and insurers expect to see.
before the retention period ends
processes are ISO 27001 certified
expectations under NIS2
resilience logging requirements for
financial services and regulated
industries
transfer of log storage.
before the retention period ends
processes are ISO 27001 certified
expectations under NIS2
resilience logging requirements for
financial services and regulated
industries
transfer of log storage.
Eye Log: Going beyond retention. Your resilience. Your compliance. Your IR readiness. One log solution.
See Eye Log in the context of your environment.