> For the complete documentation index, see [llms.txt](https://docs.blusapphire.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.blusapphire.io/release-6.0/02_what-is-oneplatform.md).

# 02\_What is OnePlatform?

**The AI-First Security Platform for the Post-SIEM World**

BluSapphire OnePlatform is a unified, AI-native security operations platform that replaces the fragmented and costly traditional security stack. It provides a single, streamlined solution for data ingestion, threat detection, investigation, and autonomous response, eliminating vendor lock-in and dramatically reducing total cost of ownership (TCO).

<figure><img src="/files/tpFItXsrk4Yr4QmsMaYR" alt=""><figcaption></figcaption></figure>

## Key Components

OnePlatform is comprised of several integrated components that work together to deliver a seamless security experience:

* [**DataStreamer**](/release-6.0/03_datastreamer.md)**:** An AI-powered data ingestion and routing engine that normalizes and enriches data from any source, then routes it to any destination.
* [**SIEMless**](/release-6.0/06_what-is-siemless.md)**™:** A next-generation SIEM with an AI-first architecture, providing real-time threat detection, signal mapping, and UEBA.
* [**AR² Agentic AI**](/release-6.0/04_ar2-agentic-ai.md)**:** An autonomous response engine that acts as a tireless AI analyst, investigating threats and taking action in minutes.
* [**OneAgent**](/release-6.0/05_oneagent.md)**:** A lightweight, prevention-first endpoint agent that provides deep visibility and control.

## Core Principles

* **AI-First:** Machine learning and artificial intelligence are at the core of every component, from data parsing to threat response.
* **Unified & SIEMless™:** A single, integrated platform eliminates the need for separate SIEM, SOAR, and data lake solutions.
* **Lock-In Free:** Built on open standards, allowing you to send your data wherever you need it, without penalty.
* **Cost-Effective:** A consumption-based model and dramatic reduction in operational overhead deliver up to 80% TCO savings.
* **Highly Scalable:** A petabyte-scale data lake foundation ensures you can handle any volume of data.

## Use Cases

* **Threat Detection and Response:** Unify your security operations and accelerate your mean time to respond (MTTR) from hours to minutes.
* **SIEM Replacement:** Modernize your security stack and escape the high costs and complexity of legacy SIEMs.
* **Security Data Lake:** Build a flexible, cost-effective security data lake for long-term analytics and compliance.
* **MSSP Enablement:** Deliver next-generation security services with a multi-tenant, scalable, and efficient platform.
