Substation

Toolkit for routing, normalizing, and enriching security event and audit logs.

PlatformWebfreeglobal

Substation is a self-hosted toolkit for routing, normalizing, and enriching security event and audit logs at scale, built for teams who want flexible, code-defined log processing instead of a closed SIEM vendor. It's aimed at security and observability teams building their own log pipelines for security monitoring.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Substation - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Substation to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Substation (or something else) actually fits.

Try a problem