LimaCharlie Endpoint Detection and Response (EDR) is a cloud-based endpoint security platform that provides real-time visibility and response capabilities for endpoints. The platform streams verbose telemetry from endpoint sensors to the cloud over semi-persistent TLS connections, enabling response actions within 100ms of triggering events. The solution uses a YAML-based detection syntax that allows security teams to create custom detections with multi-step logic and state tracking capabilities. Security teams can leverage managed and open-source rulesets from sources including SOC Prime, Soteria, Sigma, and YARA for detection creation. The platform supports vendor-agnostic telemetry ingestion, allowing organizations to ingest data from existing EDR solutions and other sources in real-time. This approach enables security teams to apply the platform's detection and response engine across telemetry from multiple sources. Response capabilities include executing remediation actions such as triggering memory dumps and killing process trees. The platform operates on an API-first architecture with a flexible billing model designed to avoid vendor lock-in and long-term contract commitments. LimaCharlie positions itself as a SecOps Cloud Platform that addresses limitations of traditional EDR solutions including delayed data collection, proprietary detection languages, and high minimum commitments.