SIGQ launches self-hosted AI for incident response

SIGQ has introduced ‘Incident Lake Self-Hosted’, a packaged version of its AI incident commander designed to operate within closed networks. The solution is provided as a Docker container, allowing it to run within a customer’s VPC, data center, or on-premises environment without requiring internet connectivity.

A key feature is the integration of ‘Otter’, a proprietary AI model specifically trained for incident response, impact estimation, and timeline reconstruction. Because Otter runs locally, the system does not need to send sensitive data to external public LLM APIs, making it suitable for highly regulated sectors such as finance, medical, and critical infrastructure.

The platform aims to address the rising frequency of ransomware attacks. According to data from the National Police Agency, ransomware reports reached a record high in the first half of 2026. The self-hosted solution enables organizations to manage the entire lifecycle of an incident—from detection and investigation to recovery and post-mortem reporting—entirely within a secure, isolated environment.