Blumira, the security operations platform for growing teams and partners, announced the launch of Hearth, a vendor-agnostic AI command center that intelligently reasons across the complete workspace, so teams can coordinate their whole environment from one place. Hearth natively integrates seamlessly for both Blumira and non-Blumira customers alike.

Most security solutions favor telemetry from their own services, with third-party solutions receiving basic integration support, or none at all. A consolidated bundle promises ease-of-use but favors vendors by locking in customers and making it hard to switch: "reduce your tool sprawl" becomes "replace your stack with ours." Hearth consolidates the command center instead of the vendors, so teams keep the best-in-class tools that fit their business and still coordinate their whole workspace from one place, without compromise.

Hearth simultaneously reasons across three sources: Blumira's already-parsed logs for customers on the platform via seamless setup; the full stack a team already runs across identity, firewalls, EDR, cloud, and raw logs; and the organization's public-facing attack surface.

Hearth creates durable, schema-validated artifacts, including DFIR investigations, compliance evidence with the query attached, and re-runnable threat hunt playbooks. Teams can act on the results today, re-run it next quarter, and hand it to an auditor.

"Teams have been told to either consolidate their tools or keep the best-in-class solutions they chose. Hearth ends that tradeoff," said Matt Warner, CEO of Blumira. "Hearth reasons across the environment a team already has, and produces resources that outlive any single case and compound security intelligence over time."

At launch, Hearth's use cases include:

• Full-scope DFIR investigation: Determine severity, map activity to MITRE ATT&CK, identify affected entities, review evidence query, and get recommended actions, in minutes instead of hours.
• Compliance and risk intelligence: Pull audit evidence from live log data with the query attached, so "how do you know?" always has an answer. No manual report building required.
• Orchestration across your stack: Turn detections into actions through the integrations a team already runs, without a separate SOAR. Hearth surfaces the action, a person approves the proposed automation, and it executes.
• MSP fleet-wide visibility: One question covers an entire fleet. Identify which customers in your portfolio are vulnerable to the latest CVE, without opening multiple dashboards or switching account views.

Hearth caps a busy year for Blumira. Over the past twelve months Blumira expanded its endpoint (EDR) and identity threat detection and response (ITDR) coverage, launched Kindling auto-triage to cut alert workloads by up to 90% by alerting on validated cases instead of every new event, and introduced Blumira Managed for 24/7 first-response MDR.