How it works Features Compare Pricing Docs Live demo Log in →
The intelligence in Keel

An AI analyst on your logs —
with the model you trust.

Keel is AI-native. Ask it anything about your logs in plain English, get automatic root-cause analysis the moment an incident fires, and connect your own AI agents over MCP — all running against the AI model you choose, with your log data staying in your own environment.

What makes Keel AI-native

Intelligence built into the platform — not bolted on.

Most tools add a chatbot on the side. In Keel, the AI is the interface: you ask questions, it investigates incidents for you, and it opens up to your own agents. Every piece runs on a model you control.

✦

Ask Keel anything

Ask in plain English and Keel answers — a result set, a chart, or a summary. Save what you ask and pin it to a dashboard.

Plain EnglishChartsSave & pin
⚡

Automatic root-cause analysis

When a detection raises an incident, Keel investigates — correlating logs and reading your runbooks — and delivers a root cause in plain English.

Auto-triggeredGrounded in your runbooks
💬

The assistant

A chat assistant that investigates in plain English — search logs, check the appliance, look up incidents — and can take actions, like adding a source or drafting a detection, that it asks you to confirm first.

Investigate & actConfirms changesRBAC-scoped
🔌

MCP server

Connect your own AI agents — Claude, for example — directly to your logs and Keel's intelligence. Read-only and scoped.

Model Context ProtocolBring your own agent
Ask Keel anything

Your logs, in plain English.

Type a question the way you'd say it — "show 5xx errors from the payment service over the last two hours" — and Keel figures out the query and answers. No query language to learn.

  • Get back what fits the question — a result set, a chart, or a summary.
  • Save a question and pin it to a dashboard to watch it over time.
  • Power users can drop to read-only SQL in the same window.
  • Runs against the AI model you configure — hosted or fully local.
keel.internal / ask
✦"error rate by service, last 2 hours"
Answer · chart
Generated in 1.2s · 7 services✓ Saved & pinned
Automatic root-cause analysis

Incidents that explain themselves.

When a detection fires, Keel doesn't just page you — it investigates first. It correlates the surrounding logs across services, reads the runbooks you've uploaded, and writes up a root cause in plain English, delivered where your team already works.

  • Correlates logs across services to trace the cascade.
  • Grounded in your own runbooks and docs — not generic advice.
  • Delivered to Slack, PagerDuty, email, or webhook.
  • One analysis per incident — no noise, no repeat spend.

See how detection & RCA work →

keel.internal / incident
CRITICALpayments-api — high error rate
Root cause
A batch job exhausted the cache connection pool on cache-01 (48/50). payments-api could not acquire connections and began failing requests.
Correlated 4 services · read 2 runbooks✓ Sent to Slack
Open & agent-ready
Keel MCP server

Point your own AI agents at your logs.

Keel ships a Model Context Protocol (MCP) server, so the agents your team already uses — Claude, for example — can investigate your logs and Keel's intelligence directly, in a conversation. It runs inside your network with the rest of Keel, so your agents reach your logs without your logs reaching a vendor cloud.

  • Bring your own agent. Connect any MCP-capable client to Keel.
  • Read-only and scoped. Agents can investigate — never change or export anything.
  • Same trust boundary. Runs inside your environment, on the model you configure.
claude ⇄ keel-mcp
# your agent, connected to Keel
tool keel.search_logs("auth 5xx, 1h")
→ 214 rows · 3 services
tool keel.get_incident("inc-8821")
→ root cause + timeline
tool keel.list_detections()
→ read-only · scoped

Straight with you

MCP is live in the product; dedicated MCP documentation is on the way. Ask us for setup help during your evaluation and we'll walk your team through connecting an agent.

Bring your own model

Open to your AI stack. No lock-in.

Keel ships no bundled model. You point every AI feature at the model you trust — and you can change your mind whenever your policy does.

🏠

A local model

Run a local model (for example Ollama) on your own network via any OpenAI-compatible endpoint — for fully air-gapped sites where nothing leaves at all.

🔑

Your own hosted key

Use your own Anthropic, OpenAI, or Google Gemini key — or any OpenAI-compatible endpoint (Azure, Groq, vLLM, Mistral…) — under your own account and that provider's terms.

🔁

Primary + failover

Configure a primary and a secondary backend that takes over automatically if the primary is unreachable. No model configured? Keel is still a complete conventional log platform.

Where your data goes

Intelligence, without handing over your logs.

This is the distinction that wins the room: your log data and the AI request are two different things — and Keel keeps you in control of both.

Two planes, both yours

The data plane stays home. All ingest, storage, search, and dashboards run on infrastructure you own. No log content, query text, or infrastructure detail ever goes to Infranexis, and there's no phone-home to operate.

The AI request is under your control. When you trigger an AI feature, only the context for that request goes to the model endpoint you configured — your provider, your key. Choose a local model and nothing leaves your network at all. It happens only on demand, when you ask or an incident fires.

Read the security overview →

See the intelligence on your own logs.

Bring a question you'd normally spend an afternoon on. We'll show you Keel answering it — on the model you choose, inside your own environment.

Book a walkthrough Try the live demo