ReliaQuest unveils GreyMatter Transit for real-time threat detection

ReliaQuest has launched GreyMatter Transit, a new data pipeline capability designed to detect cybersecurity threats in real time as they move through an organisation's infrastructure.

The company introduced GreyMatter Transit as a shift from the conventional practice of detecting threats after data is stored in Security Information and Event Management (SIEM) systems. According to ReliaQuest, traditional reliance on SIEM and similar storage tools can delay threat detection, giving adversaries more opportunities to operate within target environments.

Industry concerns about the growing volume of organisational data, rising storage costs, and protracted detection timelines formed the backdrop to the product's launch. Security teams are increasingly challenged to maintain visibility across expanding data environments while managing costs and reducing detection times. According to ReliaQuest, modern attackers equipped with artificial intelligence and automation can move laterally within networks in as little as 20 minutes, while conventional SIEM-based detection can take hours.

GreyMatter Transit aims to process and analyse security data as it traverses systems, enabling security teams to implement automated threat detection and response in real time, independently of when or where the data is ultimately stored. The system is integrated into the ReliaQuest GreyMatter platform and is designed to operate alongside existing security tools, staffing structures, and established workflows.

Architectural shift

ReliaQuest positions the technology as an architectural change to how threat detection is approached. The company says that while storage-based tools remain important, the critical need is to move detection closer to the point where the data is in motion, reducing the time attackers have to establish persistence or escalate their activities within a target environment.

"We're in the midst of the great re-architecture of cybersecurity, and more than ever, security teams need optionality and modularity," said ReliaQuest Founder and CEO Brian Murphy. "Traditional SIEM/storage approaches create costly delays for security teams, while attackers can move fast and cheap. The ability to detect in transit gives security teams the flexibility and speed they need to protect their business. GreyMatter Transit allows for that detection in transit, driving down cost and speeding up outcomes."

ReliaQuest asserts that GreyMatter Transit enables threat identification at the same pace data is moved, allowing for pre-emptive responses before damaging activity can occur. This paradigm aims to help security administrators avoid delays linked to transferring and indexing data in a SIEM before further action.

Perspectives on speed

Gopal Padinjaruveetil, Chief Information Security Officer at The Auto Club Group, commented on the current security landscape and the challenges of responding promptly in the context of increased automation on both sides of the cyber threat spectrum.

"Because of the use of Agentic AI, cybersecurity is becoming a game of speed between the attackers and the defenders. If we're waiting for data to get into the SIEM, and then to do correlation, and then to send an alert to someone, and then for someone to take an action on that alert, we've already lost valuable time to respond. GreyMatter Transit is going to help us increase our velocity so we can stay ahead."

The Auto Club Group joins a growing number of organisations seeking to accelerate detection workflows. According to ReliaQuest, this shift is necessitated by increasingly sophisticated automation capabilities now leveraged by malicious actors.

Data architecture and cost

The GreyMatter Transit system is intended to provide security teams with more control over how their data is moved and analysed, potentially lowering the cost of data storage by enabling selective processing. As data volumes continue to climb, organisations face mounting expenses related to long-term storage and indexing. Processing threats in transit could allow security teams to reduce unnecessary storage while ensuring vital security data is still acted upon swiftly.

GreyMatter Transit is natively built into ReliaQuest's GreyMatter platform, which organisations use to connect telemetry from cloud, multi-cloud, and on-premises technologies. The company states that it serves over 1,000 customers and employs 1,200 staff across six global operating centres.