Frequently Asked Questions

Everything you need to know about our products, pricing, and platform.

General

What is BlueTeamAutomation?
BlueTeamAutomation builds affordable, local-first, AI-powered cybersecurity tools. We offer 10 products covering vulnerability management, detection and response, compliance, identity management, code security, threat intelligence, and family digital safety. Every product runs on your hardware with no cloud dependency.
What does "local-first" mean?
Local-first means the software runs entirely on your machine or on-premises infrastructure. Your data - logs, source code, credentials, compliance evidence - never leaves your network. AI analysis runs locally via the built-in CVEasy AI Engine, with optional cloud AI providers if you prefer. You maintain full control of your data at all times.
Do I need cloud connectivity?
No. Every product works fully offline after installation. Cloud connectivity is optional and only used for: (1) threat intelligence feed updates in ThreatFeed, (2) optional cloud AI providers if you choose not to use local CVEasy AI Engine, and (3) license activation (one-time). Day-to-day operation requires zero internet connectivity.
What AI models do the products use?
All products use CVEasy AI Engine for local AI inference by default. This means AI analysis runs entirely on your hardware with no data sent externally. You can optionally configure cloud AI providers (OpenAI, Azure OpenAI) if you prefer cloud-based models for higher accuracy on complex analysis tasks.
Can I see a demo?
Yes. Contact our sales team for a personalized demo. We'll walk you through the platform on your own data.

Products

How many products do you offer?
We offer 10 products across 4 categories: Vulnerability & Risk (CVEasy AI, BASzy AI), Detection & Response (BTA SIEM, BTA SOAR, SAFEty Guard AI), Governance & Compliance (BTA Comply, BTA Identity), and Developer & Intelligence (BTA CodeGuard, BTA ThreatFeed). Plus Roost, our family digital safety product.
Can I buy individual products or only bundles?
Both. Every product works standalone and can be purchased individually. Bundles (Essentials, Professional, Enterprise) offer significant discounts - up to 40% off - for teams that need multiple products. You can start with one product and add more later.
Do the products work together?
Yes. The products share a common platform (@bta/core) and are designed to complement each other. For example, ThreatFeed IOCs can enrich SIEM alerts, SOAR playbooks can automate Identity credential rotation, and Comply can pull evidence from SIEM and Identity for audit reports. Each product also works perfectly standalone.
What operating systems are supported?
All products run on macOS (Intel and Apple Silicon), Linux (Ubuntu, Debian, RHEL, CentOS), and Windows via WSL2. The products use the Bun runtime and SQLite, so they work on any platform that supports Bun. Docker images are also available.
What's the difference between BTA SIEM and enterprise SIEMs?
Enterprise SIEMs (Splunk, QRadar, Sentinel) cost $50K-$500K/yr, require dedicated teams, and charge per GB ingested. BTA SIEM is Contact Sales, installs in 5 minutes, runs locally on SQLite, and includes AI-powered alert analysis. It's designed for teams of 1-50 that need real detection capability without enterprise complexity.

Pricing & Licensing

How does licensing work?
Each product uses a license key in the format BTA-XXXX-XXXX-XXXX-XXXX. One key = one installation. The license is tied to your machine and includes 12 months of updates and new detection rules. There are no per-user, per-asset, or per-GB fees.
Are there per-user or per-asset fees?
No. Ever. All pricing is flat-rate. Whether you have 5 users or 500, 10 assets or 10,000, the price is the same. We fundamentally believe security tooling should not penalize organizations for growth or for monitoring more of their infrastructure.
What payment methods do you accept?
We accept all major credit cards, ACH bank transfers, and wire transfers for Enterprise contracts. Annual billing only - we don't offer monthly billing to keep prices as low as possible.
What's included in the Enterprise bundle?
Enterprise includes all 10 products, dedicated support engineer, custom integrations, SLA guarantee, on-premises deployment support, custom detection rule development, and priority feature requests. Pricing is based on organizational needs - contact sales for a quote.
Do you offer educational or non-profit discounts?
Yes. We offer 50% off for accredited educational institutions and registered 501(c)(3) non-profit organizations. Contact us with proof of eligibility and we'll set up your discounted license.

Technical

What's the tech stack?
All products are built on: Bun (runtime), Hono (HTTP framework), SQLite (database), React + Vite + Tailwind (frontend), and CVEasy AI Engine. The shared platform (@bta/core) provides AI integration, database helpers, cryptography, and licensing across all products.
How much disk space do the products need?
Each product requires approximately 50-200MB for the application itself. Database size depends on your data volume - SIEM databases grow with event ingestion (typically 1-5GB for small teams), while other products stay under 500MB. CVEasy AI Engine models require 4-8GB additional.
Can I integrate with existing tools?
Yes. Every product exposes a REST API for integration. SIEM accepts syslog and webhook ingestion. SOAR supports webhook triggers and outbound integrations. ThreatFeed supports STIX/TAXII feed formats. We also provide example scripts for common integrations (Slack, PagerDuty, Jira, etc.).
How are updates delivered?
Updates are delivered as new release bundles that you download and install. For detection rules and threat intelligence, BTA SIEM and ThreatFeed can optionally pull rule updates automatically (requires internet). All other updates are manual to maintain your air-gap if desired.
Is the source code available?
The products are source-available. You receive the full source code with your license, and you can audit, modify, and extend it for your own use. However, redistribution and resale are not permitted under the license terms.

Still have questions?

Our team is happy to help. Reach out anytime.

Contact Us