ART stands for Advanced Reporting Tool. It is a built-in, Elastic-powered SIEM interface that is included with this bundle version of Adaptive Defense 360. It provides historical telemetry querying, threat hunting dashboards, and compliance reporting capabilities without requiring a separate SIEM subscription or external data pipeline.

The Advanced Reporting Tool retains up to one year of endpoint telemetry. This includes process execution events, network connections, file operations, and threat detections. Analysts can query this historical data at any time to investigate past incidents, perform retroactive threat hunting, or produce compliance audit evidence covering the full retention period.

Yes. In addition to using the built-in ART interface, you can also forward Adaptive Defense 360 events to an external SIEM via syslog integration. This lets organizations that have already invested in Splunk, Microsoft Sentinel, or another SIEM platform enrich those systems with Panda endpoint telemetry while still benefiting from the on-platform ART dashboards for day-to-day threat hunting.

AD360 ART is valuable for security teams of any size that want investigation and reporting depth beyond real-time alerting. Smaller teams benefit from the pre-built dashboards that surface actionable findings without requiring custom query development. Larger SOC teams value the full one-year data lake for retroactive hunting and compliance evidence. The bundle removes the need to license a separate SIEM for endpoint data, which is cost-effective at any scale.

Yes. The Advanced Reporting Tool is also available as a standalone add-on for existing Adaptive Defense 360 subscribers. If you already have AD360 and want to add historical querying and SIEM capabilities mid-term, a Firewalls.com specialist can help you add the ART add-on to your current subscription without disrupting your existing coverage or requiring a full repurchase.