Features
Real-time behavioral monitoring for workstations and agent fleets
Swarm detection correlating events across multiple endpoints
Low-false-positive ML models trained on developer workflows
Lightweight agent with <1% CPU impact
Automated investigation playbooks
Custom detection rules via YAML
Container and ephemeral environment support
API-based data export and alerting
Integration with SIEM (Splunk, ELK) and SOAR
Role-based access control
Audit logging for compliance
Agent fleet health dashboards
OpenTelemetry-native ingestion for logs, metrics, and traces
Instant log filtering and search with OpenTelemetry context
Centralized Prometheus and OpenTelemetry metrics monitoring
Real-time distributed tracing with heatmap drilldowns
Perses-based dashboards with configuration as code
Agent0: autonomous incident investigation and fix PRs
PromQL support for queries and alerting
Kubernetes monitoring with pre-built dashboards
Google Cloud SQL monitoring (PostgreSQL, MySQL, SQL Server)
Web events on GeoMap with clustering and tooltips
Synthetic monitoring and website monitoring
Cost control via monthly budget limits and spam filters
Configuration as code for dashboards and rules
Dash0 CLI with OAuth support and OTLP proxy
Keyboard-centric navigation and filtering