# Tracix > Tracix is an OpenTelemetry-native platform for application, infrastructure and network monitoring, network configuration management and security. Every workspace runs in its own Kubernetes namespace with its own ClickHouse database. Tracix is pre-GA. Facts on these pages describe what the product does today. ## Product - [Platform overview](https://tracix.io/platform): how the collector, workspaces and product areas fit together - [Applications](https://tracix.io/platform/applications): Trace every request, profile hot code paths and see what real users experience. - [Infrastructure](https://tracix.io/platform/infrastructure): Hosts, containers, Kubernetes and cloud accounts, with the logs they produce. - [Network](https://tracix.io/platform/network): Device health, traffic, topology and configuration, in the same place as your apps. - [Security](https://tracix.io/platform/security): Find exposures, detect threats and trace attack paths across the same estate. - [Operations & AI](https://tracix.io/platform/operations): Alerts, incidents, SLOs and on-call, with Brain to investigate and automate. - [Pricing](https://tracix.io/pricing): plans and the published rate card - [Integrations](https://tracix.io/integrations): the integration package catalog - [Trust center](https://tracix.io/trust): isolation, access controls and compliance status ## Products - [APM and distributed tracing](https://tracix.io/platform/apm): Trace requests across services with OpenTelemetry SDKs, the OpenTelemetry Operator or zero-code eBPF, with service maps, error groups and release comparisons. - [Continuous profiling](https://tracix.io/platform/profiling): Profile CPU across every process on your Linux hosts and Kubernetes nodes with eBPF and no code changes. Flame graphs, top functions and period comparisons. - [Database monitoring](https://tracix.io/platform/database-monitoring): Top queries, samples with wait events, explain plans and load for PostgreSQL, MySQL and SQL Server, plus health metrics for Redis, MongoDB and Elasticsearch. - [Real user monitoring](https://tracix.io/platform/rum): Sessions, Core Web Vitals, errors, funnels and web session replay for web, Android and iOS apps instrumented with upstream OpenTelemetry SDKs. - [Synthetic monitoring](https://tracix.io/platform/synthetics): Run HTTP, DNS, TLS, TCP and ICMP tests from your own collectors on a schedule, with availability, response times and the network path to every target. - [Endpoint experience](https://tracix.io/platform/endpoint-experience): Test Microsoft 365, Zoom, Salesforce and your own apps from user devices, trace the path to each, and see whether Wi-Fi, the network or the app is slow. - [Infrastructure monitoring](https://tracix.io/platform/infrastructure-monitoring): Host metrics on Linux, macOS and Windows, Kubernetes usage against requests and limits, Docker containers, and your AWS, Azure and Google Cloud inventory. - [Kubernetes and containers](https://tracix.io/platform/kubernetes): Monitor Kubernetes clusters, nodes, pods and workloads with metrics, YAML, events and container logs, and see usage against requests and limits. - [Cloud monitoring](https://tracix.io/platform/cloud-monitoring): Discover and map AWS, Azure and Google Cloud resources with read-only credentials, link them to the hosts and clusters you monitor, and add cloud metrics. - [Log management](https://tracix.io/platform/log-management): Collect logs from files, journald, Windows, syslog, Kubernetes and the cloud, parse them in your collectors with tested pipelines, and search them as patterns. - [Metrics explorer](https://tracix.io/platform/metrics): Browse every OpenTelemetry and Prometheus metric as a card, break charts down by any attribute, query with read-only SQL and create monitors from any metric. - [Network device monitoring](https://tracix.io/platform/network-monitoring): Poll network devices over SNMP v2c or v3 with 174 device profiles, receive SNMP traps, syslog and flows, and map LLDP links next to your app telemetry. - [Discovery and topology](https://tracix.io/platform/discovery-topology): Sweep CIDR ranges for SNMP devices, review each one before it joins your inventory, and map how they connect from the LLDP neighbors they report. - [Flow analysis](https://tracix.io/platform/flow-analysis): Send NetFlow, IPFIX or sFlow to a collector on your network, then rank your largest conversations by source, destination, port, autonomous system and country. - [SD-WAN](https://tracix.io/platform/sd-wan): Read Cisco Catalyst SD-WAN, Meraki, Cato, VeloCloud, EdgeConnect, Mist and Prisma SD-WAN controller APIs into one fabric health view with sites and tunnels. - [Cloud network monitoring](https://tracix.io/platform/cloud-network-monitoring): Record TCP connections on Linux hosts and Kubernetes nodes with eBPF, named by the workload at each end, with throughput, retransmits and round-trip time. - [Configuration management](https://tracix.io/platform/configuration-management): Back up device configurations, check them against compliance rules, review changes as drafts and apply them through your own collectors. - [Threat detection](https://tracix.io/platform/threat-detection): Run 3,665 SigmaHQ rules mapped to 170 MITRE ATT&CK techniques on the telemetry you collect, test them in shadow mode and respond with approval-gated actions. - [Software inventory and SBOM](https://tracix.io/platform/software-inventory): See the components inside running Linux services and which ones each process ran, match them against OSV advisories, and export CycloneDX, SPDX and OpenVEX. - [Attack paths](https://tracix.io/platform/attack-paths): Map what the internet can reach across Kubernetes and cloud, see what a compromised workload could reach next, and check the evidence behind every hop. - [Cloud security posture](https://tracix.io/platform/cloud-security-posture): Run read-only Prowler checks on AWS, Azure, Google Cloud and Kubernetes on a schedule, with a score per account, new failures and exceptions with owners. - [Response and playbooks](https://tracix.io/platform/response): Run security playbooks on alerts, verdicts and cases, gate 25 response actions behind editor or admin approval, and keep decisions on a hash-chained ledger. - [Compliance and audit](https://tracix.io/platform/compliance): Generate hash-chained evidence packs that map your logs, detections, alert handling and access reviews to PCI DSS v4.0, SOC 2 and ISO 27001:2022 controls. - [Monitors and alerting](https://tracix.io/platform/alerting): Monitor metrics, logs, traces, Kubernetes and network devices with 222 ready-made monitors, and route alerts to Slack, Teams, PagerDuty, Opsgenie or webhooks. - [Problems and cases](https://tracix.io/platform/incidents): Fold related alerts into one problem with a suspected cause and the changes before it, then work it as a case or run it as an incident with a war-room timeline. - [SLOs and on-call](https://tracix.io/platform/slos-on-call): Track availability and latency SLOs on traces or logs, get a burn-rate alert for every SLO, and escalate pages through on-call schedules until someone answers. - [Anomaly detection](https://tracix.io/platform/anomaly-detection): Learn each series' normal range with daily or weekly seasonality, score anomalies from 0 to 100, and alert only when they last, through your existing routing. - [Brain](https://tracix.io/platform/brain): Ask about your telemetry in plain language and get answers that cite evidence. Build agents, turn errors into reviewed pull requests and approve every change. - [Workflows and agents](https://tracix.io/platform/workflows): Build workflows and AI agents on a typed canvas, start from 62 playbooks, gate risky steps behind approvals, and turn production errors into pull requests. - [Tracix Collector](https://tracix.io/platform/collector): An OpenTelemetry Collector distribution for Linux, macOS, Windows, Docker and Kubernetes, configured by signed policy and upgraded from the console. ## Solutions - [OpenTelemetry adoption](https://tracix.io/solutions/opentelemetry): Move services to OpenTelemetry with upstream SDKs, your OpenTelemetry Operator or zero-code eBPF, and see each service's SDK, version and signals in one view. - [Tool consolidation](https://tracix.io/solutions/tool-consolidation): Replace separate APM, network and security tools with one collector and one isolated workspace, keep your paging tools, and bring alerts across as you move. - [Network automation](https://tracix.io/solutions/network-automation): Change network devices from one reviewed intent: vendor-neutral templates, fleet previews, approvals and maintenance windows, applied by your own collectors. - [Incident response](https://tracix.io/solutions/incident-response): Fold alerts from apps, infrastructure, network and security into one problem with its likely cause, page on-call, and run the incident from one timeline. - [Financial services](https://tracix.io/solutions/financial-services): Trace card payments end to end, review network changes before they ship, run detections on the same data and build audit evidence in an isolated workspace. - [Telecommunications](https://tracix.io/solutions/telecommunications): Monitor multi-vendor routers and switches over SNMP, back up configurations from 30 network OS families and rank flows by port, autonomous system and country. - [Retail and e-commerce](https://tracix.io/solutions/retail): See where shoppers leave checkout and why, trace orders to the database, test stores and apps from your own collectors, and build evidence for PCI DSS. - [Managed service providers](https://tracix.io/solutions/msp): Give every customer a workspace with its own database, run them all from one organization with MSP roles from your identity provider, and keep content in Git. ## Learning center - [What is OpenTelemetry?](https://tracix.io/learn/what-is-opentelemetry): OpenTelemetry explained plainly, from the API, SDKs and OTLP to the collector and semantic conventions, what it leaves to you, and how Tracix uses it. - [What is distributed tracing?](https://tracix.io/learn/what-is-distributed-tracing): How distributed tracing follows one request through many services with spans and trace context, what sampling trades away, and how Tracix stores traces. - [SLOs and error budgets in practice](https://tracix.io/learn/slos-and-error-budgets): What SLIs, SLOs and error budgets are, how to pick targets and windows, why burn-rate alerts beat thresholds, and how Tracix measures and alerts on SLOs. - [What is network configuration management?](https://tracix.io/learn/what-is-network-configuration-management): Network configuration management explained, from backups, drift and compliance to reviewed changes, CLI and model-driven protocols, and how Tracix does it. - [SNMP v2c and v3: what changes and why it matters](https://tracix.io/learn/snmp-v2c-and-v3): How SNMP works, what v2c added to v1, what v3's user-based security changes, how to run either safely, and how Tracix polls devices and receives traps. - [What is NetFlow?](https://tracix.io/learn/what-is-netflow): What NetFlow, IPFIX and sFlow record about network traffic, how exporters and collectors work, what sampling hides, and how Tracix analyzes flows. - [What is an SBOM, and what is VEX?](https://tracix.io/learn/what-is-an-sbom-and-vex): What a software bill of materials lists, the SPDX and CycloneDX formats, how VEX says whether a vulnerability affects you, and what Tracix matches and exports. ## Docs: Get started - [How Tracix fits together](https://tracix.io/docs/get-started/concepts.md): Understand organizations, workspaces, collectors, policies and signals in Tracix, where you manage each one, and how your data reaches a workspace. - [Create a workspace](https://tracix.io/docs/get-started/create-a-workspace.md): Create an isolated Tracix workspace in the console, learn what each wizard step asks and what Tracix provisions, and recover if provisioning fails. - [Get started](https://tracix.io/docs/get-started.md): Learn how Tracix is organized, send your first trace in about five minutes, create workspaces, invite your team and see what each plan includes. - [Invite your team](https://tracix.io/docs/get-started/invite-your-team.md): Invite people to your Tracix organization with a role, track and cancel pending invites, and give each person access to the workspaces they need. - [Plans and limits](https://tracix.io/docs/get-started/plans-and-limits.md): See how many workspaces, users, collectors and custom domains each Tracix plan includes, its daily telemetry and retention, and how limits work in early access. - [Send your first trace](https://tracix.io/docs/get-started/quick-start.md): Create a workspace, create an ingest key and point an OpenTelemetry SDK at your workspace's OTLP endpoint to see your first trace in Tracix. ## Docs: Collect data - [Cloud accounts](https://tracix.io/docs/collect/cloud.md): Connect AWS accounts, Azure subscriptions and Google Cloud projects to discover their resources and collect CloudWatch and Azure Monitor metrics. - [Collector configuration reference](https://tracix.io/docs/collect/collector/configuration.md): What a policy controls and what stays on the host, the collector's files, its bootstrap config.yaml and environment file, and its local health check. - [Install the Tracix Collector](https://tracix.io/docs/collect/collector/install.md): Install the Tracix Collector on Linux, macOS, Windows, Kubernetes or Docker, enroll it with an enrollment token, and confirm it reports to your workspace. - [Enroll and manage collectors with policies](https://tracix.io/docs/collect/collector/policies.md): Create collector policies, enroll collectors with enrollment tokens, change what they collect, and move, unenroll or uninstall collectors. - [Ports, proxies and firewalls](https://tracix.io/docs/collect/collector/ports-and-proxies.md): Every host and port a Tracix Collector connects to or listens on, how to send it through an HTTP proxy, and which firewall rules to open. - [Troubleshoot the Tracix Collector](https://tracix.io/docs/collect/collector/troubleshooting.md): Fix a Tracix Collector that won't install, enroll, start, apply its policy, write data or upgrade, with the cause, the fix and how to check it worked. - [Upgrade collectors](https://tracix.io/docs/collect/collector/upgrade.md): Upgrade Tracix Collectors to the stable release from the console, turn on automatic updates per policy, and recover from a failed upgrade. - [Collect data](https://tracix.io/docs/collect.md): Install the Tracix Collector, manage it with policies, instrument applications with OpenTelemetry, and collect network, cloud and integration data. - [Browser RUM](https://tracix.io/docs/collect/instrument/browser-rum.md): Measure page loads, web vitals, errors, sessions and replays from real users with the upstream OpenTelemetry browser SDK and a RUM app key. - [Zero-code eBPF tracing](https://tracix.io/docs/collect/instrument/ebpf.md): Trace HTTP, gRPC, database and messaging calls on Linux with eBPF through the Tracix Collector, with no code, image or restart changes to your services. - [Languages and SDKs](https://tracix.io/docs/collect/instrument/languages.md): Instrument services in Java, .NET, Node.js, Python, Go and more with upstream OpenTelemetry agents and SDKs, on hosts, Docker, Kubernetes or AWS Lambda. - [OTLP endpoint and ingest keys](https://tracix.io/docs/collect/instrument/otlp.md): Send OpenTelemetry traces, metrics and logs to your workspace's OTLP endpoint, and create, pause and use the ingest keys that authenticate them. - [Trace sampling](https://tracix.io/docs/collect/instrument/sampling.md): Decide which traces your workspace stores with tail sampling at the APM gateway, keep errors and slow traces, and override the rules per service. - [Integrations catalog](https://tracix.io/docs/collect/integrations.md): How Tracix integration packages work, how to find and connect one to a collector policy, and what connecting installs, such as dashboards and log pipelines. - [NetFlow, IPFIX and sFlow](https://tracix.io/docs/collect/network-data/flows.md): Receive NetFlow v5 and v9, IPFIX and sFlow from routers, switches and firewalls on a Tracix Collector, and see who talks to whom in Flow Analysis. - [SNMP polling and traps](https://tracix.io/docs/collect/network-data/snmp.md): Discover network devices and poll them over SNMP with a Tracix Collector, match them to device profiles, and receive their traps and informs. - [Syslog](https://tracix.io/docs/collect/network-data/syslog.md): Receive RFC 5424 and RFC 3164 syslog over UDP or TCP on a Tracix Collector, use the vendor log integrations, and find the logs in Log Explorer. ## Docs: Observe - [APM and tracing](https://tracix.io/docs/observe/apm.md): Find slow and failing requests with service metrics, traces and error groups, judge each deployment, and read CPU profiles built from your OpenTelemetry data. - [Metrics and dashboards](https://tracix.io/docs/observe/dashboards.md): Find any metric in the Metrics Explorer, save charts as reusable visualizations, and arrange them on dashboards you filter, share and keep in Git. - [Observe](https://tracix.io/docs/observe.md): Explore traces, logs, metrics, hosts and Kubernetes in your Tracix workspace, and build dashboards that answer your own questions. - [Hosts, Kubernetes and cloud](https://tracix.io/docs/observe/infrastructure.md): Explore hosts on a list or a map, containers and Kubernetes clusters with usage against requests, and the AWS, Azure and Google Cloud resources you connect. - [Logs and pipelines](https://tracix.io/docs/observe/logs.md): Search logs with the Log Explorer, parse and clean them in your collectors with pipelines you test first, and set how long each source is kept. ## Docs: Network - [Devices and SNMP profiles](https://tracix.io/docs/network/devices.md): Add network devices over SNMP v2c or v3, learn how Tracix matches each one to a built-in device profile, and read the device page laid out for its kind. - [Discovery and topology](https://tracix.io/docs/network/discovery-topology.md): Sweep CIDR ranges for SNMP devices, confirm or reject the candidates discovery finds, and read the topology map Tracix draws from LLDP neighbors. - [Flow analysis](https://tracix.io/docs/network/flow-analysis.md): Send NetFlow v5 or v9, IPFIX or sFlow to a Tracix Collector and explore the largest conversations by source, destination, port, country and autonomous system. - [Network](https://tracix.io/docs/network.md): Monitor network devices over SNMP, analyze flows, map topology from LLDP and manage device configuration with backups, change requests and compliance rules. - [Backups and drift](https://tracix.io/docs/network/ncm/backups.md): Schedule configuration backups with backup policies, back up on configuration-change traps, compare versions, spot drift from intent and propose a restore. - [Drafts and change requests](https://tracix.io/docs/network/ncm/change-requests.md): Declare device configuration with templates, Brain or hand-written changes, get it approved, deploy it through the device's collector and stage firmware images. - [Compliance rules](https://tracix.io/docs/network/ncm/compliance.md): Check device configurations against the 10 built-in compliance rules and your own text checks, read the results per rule and per device, and fix what fails. - [Network configuration management](https://tracix.io/docs/network/ncm.md): How Tracix backs up device configurations, keeps intended and running configuration apart, and moves changes from draft to device through your collectors. - [Device credential vault](https://tracix.io/docs/network/ncm/vault.md): Store device passwords, keys and secrets in the write-only vault, bind them to devices by scope and role, and see how collectors receive them for each job. - [Supported platforms](https://tracix.io/docs/network/platforms.md): Which network OS families Tracix configuration management supports for backup, changes and scoped writes, and the capture command and access each needs. ## Docs: Security - [Detection rules and shadow mode](https://tracix.io/docs/security/detections.md): Install the SigmaHQ rule pack, check that each rule can see your data, backtest it, trial it in shadow mode and promote it to production when it is quiet. - [Security](https://tracix.io/docs/security.md): Detect threats with SigmaHQ rules tested in shadow mode, match the software you run against OSV advisories, and respond through actions a person approves. - [Response actions](https://tracix.io/docs/security/response.md): Review and approve the actions agents, playbooks and Brain propose, bind each action to your own security tools, and trace every decision on the audit ledger. - [Software inventory and SBOM export](https://tracix.io/docs/security/software-inventory.md): Inventory the software in your Linux applications, see what each process loads, match it against OSV advisories, and export CycloneDX, SPDX or OpenVEX. ## Docs: Alerting and response - [Alerting and response](https://tracix.io/docs/alerting.md): Create monitors, route alert notifications to the right people, work problems and cases, and track SLOs, on-call schedules and escalations in Tracix. - [Monitors and templates](https://tracix.io/docs/alerting/monitors.md): Create monitors for metrics, logs, traces and devices from templates or the built-in library, tune thresholds and messages, and act on the alerts they raise. - [Notification channels](https://tracix.io/docs/alerting/notifications.md): Send Tracix alerts to Slack, Microsoft Teams, PagerDuty, Opsgenie, a webhook or your email gateway, route them with policies, and hold them during downtimes. - [Problems and cases](https://tracix.io/docs/alerting/problems-and-cases.md): See how Tracix folds related alerts into one problem with its likely cause and recent changes, then open a case to track the response, or run it as an incident. - [SLOs and on-call](https://tracix.io/docs/alerting/slos-and-on-call.md): Define availability and latency SLOs with error budgets and burn-rate alerts, then set up on-call schedules and escalation policies that page your team. ## Docs: AI and automation - [Brain](https://tracix.io/docs/ai/brain.md): Ask Brain about your logs, metrics, traces and devices, check the evidence behind each answer, and confirm, edit or reject the changes it proposes. - [AI and automation](https://tracix.io/docs/ai.md): Use Brain to ask questions about your telemetry, explain problems and propose changes that a person approves, with the model provider you choose. - [Model providers and the AI switch](https://tracix.io/docs/ai/model-providers.md): Connect Anthropic, OpenAI or a compatible endpoint, choose the model each AI feature uses, price your models and turn every AI call off in one place. - [Workflows, agents and Auto-Fix](https://tracix.io/docs/ai/workflows.md): Build workflows and AI agents on a canvas with approval steps, start from ready-made playbooks, and let Auto-Fix turn production errors into pull requests. ## Docs: Administration - [API keys and ingest keys](https://tracix.io/docs/admin/api-keys.md): Create workspace API keys for collectors, webhook senders and CI with the permissions and expiry they need, and manage the ingest keys OpenTelemetry SDKs use. - [Billing and usage](https://tracix.io/docs/admin/billing.md): Read your Tracix plan, usage meters and estimated cost in the console, manage payment through Stripe, find invoices, and see what early access means. - [Administration](https://tracix.io/docs/admin.md): Manage your Tracix organization and workspaces, users and roles, SAML and OIDC single sign-on, SCIM provisioning, MFA, API keys and billing. - [Multi-factor authentication](https://tracix.io/docs/admin/mfa.md): Turn on TOTP multi-factor authentication with an authenticator app, keep recovery codes safe, require MFA for everyone and set the session policy. - [Provision users with SCIM](https://tracix.io/docs/admin/scim.md): Connect your identity provider's SCIM 2.0 client to Tracix to create, update and deactivate users and push groups, using a bearer token you can rotate. - [Single sign-on with SAML or OIDC](https://tracix.io/docs/admin/sso.md): Connect your identity provider to Tracix with OIDC or SAML, verify your email domain, map identity provider groups to roles, and require SSO. - [Users and roles](https://tracix.io/docs/admin/users-and-roles.md): Understand organization and workspace roles in Tracix, build custom roles from 52 permission surfaces, and see what each role can do. - [Organizations and workspaces](https://tracix.io/docs/admin/workspaces.md): Manage your Tracix organization and its workspaces in the console, decide who can open each workspace, update releases, and suspend or delete workspaces. ## Docs: API and as code - [Monitors, dashboards and detections as code](https://tracix.io/docs/api/as-code.md): Publish detection rules, value lists and YARA rulesets from Git with validate, plan and apply, and describe monitors and dashboards in tracix.io/v1 bundles. - [Authenticate with API keys](https://tracix.io/docs/api/authentication.md): Create workspace API keys for CI pipelines and alert webhooks, send them in the X-API-Key header, and see which credential each Tracix endpoint accepts. - [Run as code in CI](https://tracix.io/docs/api/ci.md): Validate and plan detection content on every pull request and apply the reviewed plan from main, with GitHub Actions or any CI that runs Node.js 20 or later. - [API and as code](https://tracix.io/docs/api.md): Automate Tracix from scripts and CI with workspace API keys, detection content as code with validate, plan and apply, and webhooks for external alerts. - [Workspace API reference](https://tracix.io/docs/api/workspace-api.md): The workspace endpoints you can call with API keys today, to validate, plan, apply and export detection content, download the CLI and send external alerts. ## Docs: Reference - [Endpoints and ports](https://tracix.io/docs/reference/endpoints-and-ports.md): Every hostname and port that Tracix Collectors, OpenTelemetry SDKs and browsers connect to, and the ports a collector listens on for syslog, flows and traps. - [Glossary of Tracix terms](https://tracix.io/docs/reference/glossary.md): Short definitions of the terms used across the Tracix docs and console, from organizations, workspaces and policies to enrollment tokens, plans and shadow mode. - [Reference](https://tracix.io/docs/reference.md): Facts to look up while you work with Tracix, from the hostnames and ports collectors and SDKs use to Tracix terms and Tracix Collector release notes. - [Tracix Collector release notes](https://tracix.io/docs/reference/release-notes.md): What changed in each Tracix Collector release, newest first, from new integrations and listeners to fixes for Linux, macOS, Windows, Docker and Kubernetes. ## Optional - [All docs as one file](https://tracix.io/llms-full.txt)