BrainStore

The storage engine underneath BrainSOC, purpose-built for security telemetry, which always follows the same pattern: data arrives once, stays unmodified, and is queried across time ranges.

Why it exists

It addresses a fundamental mismatch: general databases optimize for row updates, but security telemetry never updates. BrainStore specializes exclusively in the write-once, read-as-aggregates model. That specialization means a query spanning an afternoon doesn’t process an entire year of data.

What it does now

• Embedded within BrainSOC, on Braincap infrastructure
• Managing hundreds of gigabytes of active telemetry, with continuous writes
• Not available as a standalone deployment

Capabilities

• Durable writes — every write lands in a durable log before it is confirmed, and every block carries a checksum. Power loss affects milliseconds of data, not full afternoons.
• Efficient compression — compression adapts per column based on the actual data patterns, making long-term retention economically viable.
• Query optimization — indexes let searches eliminate most data before reading, delivering analyst results while the investigation is still active.
• Autonomous operations — background processes handle compaction, retention policies, deduplication and backups automatically.

Roadmap

• Replication between multiple sites
• Tiered storage with long-term archival