
A cloud-native, event-driven data pipeline toolkit for security teams that processes and routes data across AWS services with custom formatting and API enrichment capabilities.
Checked October 2026.
Substation is a cloud-native data pipeline toolkit designed for security teams to process and route event-driven data across AWS cloud services.
The tool provides extensible data processing capabilities that allow security teams to transform and manipulate data streams according to their specific requirements. It supports conditional routing functionality, enabling data to be directed to different AWS services based on predefined criteria and rules.
Substation includes custom schema formatting features that allow teams to structure data according to their organizational needs and compliance requirements. The toolkit supports unlimited data enrichment through integration with external APIs, enabling teams to augment their data with additional context and intelligence.
The platform is designed for serverless deployment within AWS infrastructure, allowing teams to scale their data processing operations without managing underlying server resources. This architecture supports event-driven workflows that can automatically respond to incoming data streams and trigger appropriate processing actions.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Substation: features, pricing and alternatives.
Substation is a product in the Security Data Pipelines category. It covers Cloud Native, Serverless and AWS.
Substation is free. Download and setup instructions are at https://github.com/brexhq/substation/.
Alternatives to Substation listed on CybersecTools:
Compare all Substation alternatives at https://cybersectools.com/alternatives/substation
Substation is available as a cloud service. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Real-time threat detection and telemetry routing platform for security data
Security log processing platform for routing, transforming, and filtering logs
Security data lake platform for threat detection via S3-native log indexing.
Enterprise log management software for collecting and centralizing log data
Tenzir is a data pipeline solution that provides security data management capabilities through pipelines, nodes, and a centralized platform for analytics and detection operations.
Security data pipeline platform with a query language for log normalization and
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI