The Witnesses

Martyria — Security Monitoring

Your network has witnesses around the clock. Martyria is SoftSol’s independent security monitoring platform — it watches network traffic for attacks, suspicious behaviour, and signs of compromise without touching your client systems.

martyria.softsol.co.za

2

Witness nodes

66k+

Threat signatures

3

Evidence streams

24/7

Continuous monitoring

Why Martyria?

Antivirus and a firewall are essential — but they protect individual devices and control what traffic is allowed. Martyria adds what they cannot: continuous, independent monitoring of what is actually happening on your network, with evidence stored outside your environment.

Network-level visibility

See probes, break-in attempts, and unusual outbound connections — not just malware on individual machines.

Evidence that survives breach

Logs and alerts are forwarded to independent SoftSol infrastructure the moment they are generated — attackers cannot wipe them on the way out.

Zero-touch enrolment

Certified SoftSol MikroTik routers are enrolled automatically — evidence collection starts with no client-side configuration.

Engineer-reviewed alerts

SoftSol SOC engineers review alerts with context from all evidence streams — informed response, not guesswork.

Three streams of evidence

Traffic flow records

NetFlow / IPFIX summaries of every connection — inbound and outbound — even when content is encrypted.

Live packet inspection

Inbound internet traffic mirrored to Suricata IDS with 66,000+ attack signatures on the Elisha sensor node.

Router event logs

Firewall, authentication, and admin events forwarded via syslog — a separate layer that does not depend on packet inspection.

What The Witnesses look for

Active attacks

Port scans, exploit attempts, brute-force logins, and vulnerability probes caught in real time.

Malware indicators

Known delivery patterns, ransomware file transfers, and malicious downloads from Emerging Threats rules.

Compromised devices

Command-and-control connections and devices quietly calling home to external servers.

Data exfiltration

Unusual outbound data volumes to unexpected destinations — even over encrypted channels.

Router compromise

Failed logins, admin access anomalies, and firewall events from syslog correlation.

Known bad destinations

Traffic to blocklisted IPs and domains associated with malware, phishing, and botnets.

Firewall vs antivirus vs Martyria

Layer Firewall Antivirus Martyria
Controls permitted traffic
Scans individual devices
Monitors network behaviourPartial
Independent evidence archive
Survives client network compromise
SoftSol engineer review

The Platform

Martyria — The Witnesses

Independent security operations monitoring on SoftSol’s dedicated security network. Open the SOC dashboard or read the full product overview on the Martyria site.

Your firewall is the lock on the door. Antivirus is the alarm in each room. Martyria is the security camera system with a permanent record kept somewhere the intruder cannot reach.