The depth of graph analytics.
The speed and throughput of event stream processing.
Instantly turn high-volume, complex data streams into insights and automated actions with the industry’s only real-time streaming graph engine.
Data and Security Products Face Impossible Compromises
Traditional approaches buckle under volume, velocity, and complexity, forcing impossible choices:
Deep Analysis
But Too Slow
Detect sophisticated attacks only after the damage is done.
Fast Insights
But Too Shallow
Miss multi-stage patterns hidden across time and sources.
PROCESSING AT A
Limited Scale
Pre-filtering your data = missed results and reduced adaptability
Deliver All Three With Quine
Quine Streaming Graph is the only real-time streaming graph engine,
purpose-built for the demands of modern, data-intensive security platforms.
Developed with DARPA.
Battle-tested by CrowdStrike, the U.S. Air Force, U.S. Navy, and others.
High Volume
Ingest and analyze internet-scale data streams (>1M events/sec) alongside historical context without dropping data or compromising depth.
Deep Questions
Instantly identify complex, multi-hop patterns (10, 20, 100+ hops) indicative of risk, fraud, or opportunity, even across months or years of data.
Fast Answers
Deliver sub-second insights and trigger immediate automated responses the moment a critical pattern emerges.
No need to choose. Deliver speed, depth, and scale simultaneously with Quine.
Trying Quine on your data pipeline is as easy as running a single shell command.
The Power of Quine
USE ALL YOUR DATA
High Volume
Ingest and Process Data at Scales previously impossible with graph analytics.
Process massive data streams
Ingest data from diverse sources like Apache Kafka, AWS Kinesis, Pulsar, SQS, files, and APIs at sustained rates beyond 1 million events per second per cluster.Combine real-time and historical context
Merge live event streams with historical data in the graph or fetched from external datastores. Quine eliminates the need for time windows, allowing analysis across long durations (days, months, even years) to detect complex attack patterns over time.Build graphs of unlimited size
Quine’s distributed architecture is built for horizontal scaling. It also includes built-in mechanisms to efficiently handle supernodes (nodes with extremely high edge counts) without performance degradation.Ensure stability with built-in backpressure
Quine’s fully backpressured stream processing dynamically adjusts throughput, preventing data loss and ensuring system stability even when dealing with bursty traffic or slower downstream components.
UNDERSTAND ALL YOUR DATA
Complex Patterns
Ask deep questions of connected data, enabling detection of
sophisticated attacks that other approaches miss entirely.
Identify deeply connected patterns
Use the expressive power of the Cypher query language to define and detect complex event patterns spanning any number of connections across vast datasets. Uncover sophisticated or subtle behavioral correlations invisible to simpler rule engines and conventional analytics.
Leverage categorical data directly
Process high-cardinality categorical data natively, maintaining the rich context that reveals sophisticated attacks.
Handle out-of-order and late-arriving data
Quine’s event-driven, stateful architecture means patterns are matched automatically and incrementally as data arrives. The order or timing doesn’t matter; You can identify patterns even with significant delays, ensuring accuracy without performance hits or complex data re-ordering pipelines.
Apply graph algorithms & AI/ML to streaming data challenges
Integrate built-in graph algorithms (like random walks for GNN training via Node2Vec/GraphSAGE approaches) or custom AI/ML models directly into your stream processing. Perform real-time anomaly detection, pathfinding, root cause analysis, and more on the live graph.
ANALYZE ALL YOUR DATA
Low Latency
Get fast answers and trigger real-time actions the moment a full threat pattern emerges.
Millisecond latency
Ingest data from diverse sources like Apache Kafka, AWS Kinesis, Pulsar, SQS, files, and APIs at sustained rates beyond 1 million events per second per cluster.Analyze in real-time, not offline processing
Quine’s efficient incremental processing allows graph analytics that were previously confined to slow, offline batch jobs (like complex risk calculations or post-breach attack path analysis) to run continuously within the live data stream, delivering results in microseconds vs hours at a drastically reduced cost.Stream results instantly with Standing Queries
Quine eliminates the need for batch processing and inefficient polling. Standing queries emit results or trigger downstream actions (via Kafka, Kinesis, webhooks, custom code) the moment a specified pattern completes, enabling genuine real-time, event-driven workflows across massive, connected data streams.
Get Started with Quine Recipes
Trying Quine on your data pipeline is as easy as running a single shell command.
Enterprise-ready
Ready to upgrade? Quine Enterprise is built for scale, reliability, and seamless integration.
Horizontal scalability
Scale clusters seamlessly across commodity hardware or cloud instances (including Kubernetes) to handle any data volume or query complexity. Demonstrated scaling past 1 million events per second.
High availability and resilience
Designed with automated failure detection, instant failover, cluster management, and efficient state recovery. Backpressured and verified to ensure no data is ever lost, even if hardware fails.
Flexible persistence
Intelligently manages data between fast in-memory processing and durable disk storage. Integrate with your existing persistence solutions (Cassandra, RocksDB, Clickhouse, etc) or let Quine manage optimized storage for reduced integration friction.
Data durability and replication
Benefit from the replication and durability features of your chosen persistence layer (e.g. Cassandra’s multi-datacenter replication) for robust data protection and disaster recovery strategies.
Role-based access control
Connect to your enterprise directory service to provide fine-grained access control so every usercan do just what they, and no more.
Deployment flexibility
Automatically scales up to use resources available on each machine or scales down to deploy at the edge on a device as small as a Raspberry Pi.
Novelty Detector: Real-Time Anomaly Detection
thatDot’s own Novelty Detector product is built on top of Quine to harness the powers of streaming graph analysis for anomaly detection on categorical data. By building a dynamic probabilistic graph model on the fly, Novelty Detector fingerprints every ideosyncrasy of every object in the graph to identify truly anomalous behaviors, exaplin with context, and avoid false positives – a feat impossible for traditional anomaly detection.
Novelty Detector enables powerful use cases like insider threat detection, zero-day exploit discovery, and sophisticated fraud prevention.