Log search that doesn't meter you.
LogVault aggregates and indexes your logs on your hardware, with PII redacted before anything is written, an audit trail that proves it wasn't touched, and retention enforced by the database rather than promised in a policy. It installs in a minute and it never calls home.
Install it and it works
One command, a loopback port, no account, no cloud, no per-GB bill.
What you actually get
Six things that are hard to buy elsewhere, especially all together.
Runs on your metal
Includes a deployment for networks with no internet at all. Licence checks are offline signature checks, so nothing has to reach us — ever.
Nothing phones home
No usage pings, no update checks, no analytics, no vendor account. There is no outbound call in the product to disable.
PII removed before storage
Addresses, emails, card numbers, IBANs, JWTs and tokens are matched on ingest. The raw line is never written, so it cannot leak later.
Tamper-evident audit trail
Every search, export and erasure is appended to a hash-chained log, exportable for a third party to verify without access to your data.
Expiry the database enforces
Retention is a trigger and a scheduled sweep. It keeps working when ingest stops — which is exactly when a policy-only promise fails silently.
Pay once, keep the source
One-time licence, source included and auditable, no per-GB fee and no data egress bill. The version you are entitled to keeps working.
Two editions
Same code. The Enterprise licence unlocks the controls a compliance team asks for.
| Community | Enterprise | |
|---|---|---|
| Price | Free | One-time, published at launch |
| Log search, filters, export | Yes | Yes |
| PII redaction, retention, audit chain | Yes | Yes |
| Single sign-on (SAML, OIDC, LDAP) | — | Yes |
| Roles, per-agent tokens, IP allowlists | — | Yes |
| Legal hold, ROPA and compliance evidence packs | — | Yes |
| Clustering, air-gap bundle, metrics endpoint | — | Yes |
| Support | Public issue tracker | Email tickets, one business day |
What we don't claim
Because the first thing a security reviewer does is check.
Read this before you put us on a shortlist
- We are not SOC 2 or ISO 27001 certified. LogVault produces the evidence — audit chains, retention records, access logs, a ROPA export — and maps it to those controls. Certification is your auditor's judgement about your organisation, not a badge a vendor can hand you.
- We do not certify that your processing is lawful. Your DPO and your regulator decide that. We make the technical measures real and inspectable.
- Self-hosted means you run it. We ship the installers, the hardening and the documentation; the operating system, the disk and the backups are yours.
- Support is email only — one business day, UK hours. No telephone, no on-site, no 24/7. We would rather state that plainly than imply cover we cannot staff.
Want it when it lands?
Tell us what you run today — rsyslog and grep, a cloud tool you are paying per GB for, or nothing yet. That shapes what we ship first.
Email hello@logvault.dev