SIGQ launches Incident Lake Self-Hosted for closed‑network incident response

SIGQ has begun offering Incident Lake Self-Hosted, a package version of its Incident Lake AI incident commander designed to run entirely within a customer’s closed network. The solution is delivered as a Docker container and can be deployed on a customer’s VPC, data center, or on‑premises environment without any connection to the public internet. Within the same isolated environment, SIGQ’s proprietary incident‑response AI model Otter operates alongside the commander, eliminating the need to send data to external public large language model APIs. This enables detection, initial response, investigation, recovery, reporting, and post‑mortem activities to be completed entirely offline.

The launch follows a police agency report that ransomware incidents in the first half of 2026 reached 123 cases, the highest half‑year total since statistics began in 2020. The report also noted that over 60 percent of affected organizations required more than 10 million yen to recover, and fewer than half were able to restore operations within a month. Many organizations that wish to use AI for incident response are unable to do so because their environments are disconnected from the internet and cannot transmit sensitive incident data to external services. Incident Lake Self-Hosted addresses this gap by providing a fully self‑contained AI workflow that respects data isolation.