Axoflow at GovWare 2026, Singapore

Axoflow is heading back to GovWare 2026, October 13-15, at Marina Bay Sands in Singapore, together with our partner DT Asia.

Last year we exhibited with DT Asia for the first time. It turned out to be one of the best rooms we've been in all year: architects and security engineers from agencies and regulated operators, most of them running logging infrastructure our team has been building for decades, and most of them in the middle of a decision about what comes next. This year we're back with the same partner, a new booth, and much more to show.

See what the creators of syslog-ng™ built next

That's the line on our outside wall, and it's the honest way to introduce ourselves in this room. A lot of the people who stopped by last year already run syslog-ng™. Axoflow was built by the original team that created it.

What we built next is the layer the SIEM never did well: collection and storage for your security data, running as one platform on your own infrastructure. And now we're introducing AxoDetect on top of it. Storage at the core. The pipeline feeding it. Detection when you need it.

Storage at the core. Fully on-prem.

Most of the serious conversations we had in Singapore last year came back to the same requirements: critical information infrastructure (CII) systems handled under their own rules, retention periods met, logs stored locally, nothing leaving the environment that shouldn't. Not a preference. A regulatory line.

Axoflow is built for that line. The platform deploys fully on-premises, and the console holds only metrics, so your security data never leaves your premises. AxoLake stores everything in open formats and keeps all of it searchable, not as an archive you have to bring back before you can look at it. For standalone or disconnected sites, Axoflow Locker serves as your local log storage appliance, with search built in and zero external dependency.

Your security data stays on your infrastructure. All of it, still searchable.

Your log collection outlives your SIEM

The other conversation we expect a lot of: SIEM migration. Tenders, license expiries, and platform refreshes are all forcing the question, and every one of them carries the same fear: rebuild the collection layer again, re-parse every source again, retrain the team again.

You don't have to. Axoflow sits in front of whatever SIEM you run today and whatever you pick next. Collection, parsing, and normalization happen once, in the pipeline, and storage stays put while the destination changes. It takes whatever already feeds your SIEM, whether that's the SIEM vendor's own agent or a third-party one. If syslog-ng™ is part of that estate, your configurations and skills carry over, and AxoSyslog is the drop-in upgrade, built by the same people.

Swap the SIEM. Keep the data layer.

Detection when you need it

Detection rules can now run in-stream in the pipeline itself, before an event reaches the SIEM, forwarding the finding rather than the raw log. Detection is in early access now. If you want to see it, ask at the demo station.

Catch us on the schedule

Balázs Scheidler, the creator of syslog-ng, is speaking on day one.

AI SOC Is Inevitable. Your Data Layer Will Decide Whether It Works
Tuesday, October 13, 2:30 PM SGT, Level 3, Room GW3

Every SOC is going to put AI to work on its security data. Whether that works depends on what it gets fed. AI agents reasoning over misparsed, unclassified, half-collected logs give confident wrong answers, and they do it at a token cost nobody budgeted for. The talk makes the case that the data layer, collection through normalization to storage, is where the AI SOC succeeds or fails, and what owning that layer means on your own infrastructure.

The data floor sets the AI ceiling.

Who'll be there

Balázs Scheidler, CEO & Co-founder. Creator of syslog-ng™. Bring him the hardest log source in your estate.

Sándor Guba, CTO & Co-founder. Creator of the Kubernetes Logging Operator, leads Axoflow's technical vision.

The DT Asia team. Our trusted, long-time Singapore partner, on the stand with us all three days.

Book a meeting

We'll be running one-on-one sessions throughout the show. If you're attending GovWare and want to talk about on-prem log storage, migrating off your current SIEM without rebuilding the collection pipeline, or where your syslog-ng™ deployment goes from here, find us at booth M31 or book time with us.