<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0">
    <channel>
        <title>IceGuard Blog</title>
        <link>https://iceguard.io/blog/</link>
        <description>IceGuard Blog</description>
        <lastBuildDate>Sun, 25 Oct 2026 00:00:00 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>https://github.com/jpmonette/feed</generator>
        <language>en</language>
        <item>
            <title><![CDATA[Should you federate at scale?]]></title>
            <link>https://iceguard.io/blog/should-you-federate-at-scale/</link>
            <guid>https://iceguard.io/blog/should-you-federate-at-scale/</guid>
            <pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[There are two kinds of people in the world: those who think federation at scale is a good idea, and those who have tried federation at scale. Here's why.]]></description>
            <category>siem</category>
            <category>federation</category>
            <category>architecture</category>
            <category>cost</category>
        </item>
        <item>
            <title><![CDATA[Why are legacy SIEMs so slow and expensive?]]></title>
            <link>https://iceguard.io/blog/why-are-legacy-siems-so-slow-and-expensive/</link>
            <guid>https://iceguard.io/blog/why-are-legacy-siems-so-slow-and-expensive/</guid>
            <pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[Legacy SIEMs were built for a different time, and haven't evolved since. They can't keep up with modern infrastructure.]]></description>
            <category>siem</category>
            <category>architecture</category>
            <category>storage</category>
            <category>indexing</category>
        </item>
        <item>
            <title><![CDATA[Raise the bar!]]></title>
            <link>https://iceguard.io/blog/raise-the-bar/</link>
            <guid>https://iceguard.io/blog/raise-the-bar/</guid>
            <pubDate>Sat, 17 Oct 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[Legacy SIEMs are falling behind. We need to redefine what good looks like.]]></description>
            <category>siem</category>
            <category>ai</category>
            <category>security-data</category>
            <category>architecture</category>
        </item>
        <item>
            <title><![CDATA[What's the real cost of a GB?]]></title>
            <link>https://iceguard.io/blog/whats-the-real-cost-of-a-gb/</link>
            <guid>https://iceguard.io/blog/whats-the-real-cost-of-a-gb/</guid>
            <pubDate>Thu, 15 Oct 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[The root cause of your SecOps data problems is SIEM pricing, not physics. Fix the price, and the rest of the puzzle falls into place.]]></description>
            <category>siem</category>
            <category>security-data</category>
            <category>pricing</category>
            <category>architecture</category>
        </item>
        <item>
            <title><![CDATA[The decoupled SIEM is an oxymoron!]]></title>
            <link>https://iceguard.io/blog/the-decoupled-siem-is-an-oxymoron/</link>
            <guid>https://iceguard.io/blog/the-decoupled-siem-is-an-oxymoron/</guid>
            <pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[The SIEM's purpose is coupling. Unsurprisingly, decoupling it makes that job harder.]]></description>
            <category>siem</category>
            <category>security-data</category>
            <category>architecture</category>
            <category>detection</category>
        </item>
        <item>
            <title><![CDATA[Is the SIEM dead?]]></title>
            <link>https://iceguard.io/blog/is-the-siem-dead/</link>
            <guid>https://iceguard.io/blog/is-the-siem-dead/</guid>
            <pubDate>Mon, 12 Oct 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[Slow search and skyrocketing costs don't mean the SIEM category is obsolete. In fact, it's more important than ever. But the tech is due for an upgrade!]]></description>
            <category>siem</category>
            <category>security-data</category>
            <category>soc</category>
            <category>ai</category>
        </item>
    </channel>
</rss>