<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
    <id>https://iceguard.io/blog/</id>
    <title>IceGuard Blog</title>
    <updated>2026-10-25T00:00:00.000Z</updated>
    <generator>https://github.com/jpmonette/feed</generator>
    <link rel="alternate" href="https://iceguard.io/blog/"/>
    <subtitle>IceGuard Blog</subtitle>
    <icon>https://iceguard.io/favicon.png</icon>
    <entry>
        <title type="html"><![CDATA[Should you federate at scale?]]></title>
        <id>https://iceguard.io/blog/should-you-federate-at-scale/</id>
        <link href="https://iceguard.io/blog/should-you-federate-at-scale/"/>
        <updated>2026-10-25T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[There are two kinds of people in the world: those who think federation at scale is a good idea, and those who have tried federation at scale. Here's why.]]></summary>
        <author>
            <name>The IceGuard team</name>
        </author>
        <category label="siem" term="siem"/>
        <category label="federation" term="federation"/>
        <category label="architecture" term="architecture"/>
        <category label="cost" term="cost"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Why are legacy SIEMs so slow and expensive?]]></title>
        <id>https://iceguard.io/blog/why-are-legacy-siems-so-slow-and-expensive/</id>
        <link href="https://iceguard.io/blog/why-are-legacy-siems-so-slow-and-expensive/"/>
        <updated>2026-10-25T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Legacy SIEMs were built for a different time, and haven't evolved since. They can't keep up with modern infrastructure.]]></summary>
        <author>
            <name>The IceGuard team</name>
        </author>
        <category label="siem" term="siem"/>
        <category label="architecture" term="architecture"/>
        <category label="storage" term="storage"/>
        <category label="indexing" term="indexing"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Raise the bar!]]></title>
        <id>https://iceguard.io/blog/raise-the-bar/</id>
        <link href="https://iceguard.io/blog/raise-the-bar/"/>
        <updated>2026-10-17T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Legacy SIEMs are falling behind. We need to redefine what good looks like.]]></summary>
        <author>
            <name>The IceGuard team</name>
        </author>
        <category label="siem" term="siem"/>
        <category label="ai" term="ai"/>
        <category label="security-data" term="security-data"/>
        <category label="architecture" term="architecture"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[What's the real cost of a GB?]]></title>
        <id>https://iceguard.io/blog/whats-the-real-cost-of-a-gb/</id>
        <link href="https://iceguard.io/blog/whats-the-real-cost-of-a-gb/"/>
        <updated>2026-10-15T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[The root cause of your SecOps data problems is SIEM pricing, not physics. Fix the price, and the rest of the puzzle falls into place.]]></summary>
        <author>
            <name>The IceGuard team</name>
        </author>
        <category label="siem" term="siem"/>
        <category label="security-data" term="security-data"/>
        <category label="pricing" term="pricing"/>
        <category label="architecture" term="architecture"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The decoupled SIEM is an oxymoron!]]></title>
        <id>https://iceguard.io/blog/the-decoupled-siem-is-an-oxymoron/</id>
        <link href="https://iceguard.io/blog/the-decoupled-siem-is-an-oxymoron/"/>
        <updated>2026-10-14T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[The SIEM's purpose is coupling. Unsurprisingly, decoupling it makes that job harder.]]></summary>
        <author>
            <name>The IceGuard team</name>
        </author>
        <category label="siem" term="siem"/>
        <category label="security-data" term="security-data"/>
        <category label="architecture" term="architecture"/>
        <category label="detection" term="detection"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Is the SIEM dead?]]></title>
        <id>https://iceguard.io/blog/is-the-siem-dead/</id>
        <link href="https://iceguard.io/blog/is-the-siem-dead/"/>
        <updated>2026-10-12T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Slow search and skyrocketing costs don't mean the SIEM category is obsolete. In fact, it's more important than ever. But the tech is due for an upgrade!]]></summary>
        <author>
            <name>The IceGuard team</name>
        </author>
        <category label="siem" term="siem"/>
        <category label="security-data" term="security-data"/>
        <category label="soc" term="soc"/>
        <category label="ai" term="ai"/>
    </entry>
</feed>