Home · Platform
The Converge360™ architecture

Five layers. Twelve components. One platform.

Not a bundle of consoles — a single pipeline. Signal enters at the edge and emerges at the top as coordinated action, with an agentic AI fabric reasoning alongside every layer.

The architecture

One pipeline, end to end. Five cooperating layers.

Converge360™ is not a bundle of consoles — it is a single pipeline built as five cooperating layers and twelve components. Each does one job well and hands clean output to the layer above. Tap any layer to see its components.

Triquetra EdgeBridge architecture — enterprise data sources and discovery flow one-way through EdgeBridge into the Converge360 cloud platform
How it fits together — enterprise data sources and discovery flow one-way through EdgeBridge into Converge360.
L5

Experience

The single pane of glass
2 components
11

Dashboard

Single pane of glass

Dynamic, real-time views drawing from every layer below — drill-downs, reports and KPIs in one place.

12

Mobile App

Experience on the go

Live dashboards, push alerts and one-tap approvals — response never waits for someone to reach a desk.

L4

Operations

Where verdicts become coordinated action
3 components
08

Workflow

Executes the response

Runs ordered, automatable playbooks the moment an incident arrives — the parts of response that don't need a human.

09

Task Management

Owns the human work

Assigns, tracks and drives human-owned tasks to closure with accountability that's never in doubt.

10

Notification

Reaches the right people

Delivers alerts and escalations across email, chat, SMS and on-call channels so responders engage fast.

L3

Intelligence

Where trusted entities become judgment
3 components
05

Rule Engine

Whether it matters

Applies detection and policy logic to entities and events — producing rule hits and classifications.

06

Threat Intelligence

Whether it's known-bad

Adds external context — enriched IOCs and adversary intel against the wider threat landscape.

07

Correlation Engine

What's actually happening

Stitches rule hits, threat context and entities into coherent, timeline-ordered incidents.

L2

Foundation

Where raw signal becomes canonical truth
2 components
03

Identity Fabric

The canonical "who"

One trusted, de-duplicated record for every human, service and machine identity — resolved from raw L1 feeds.

04

Asset Registry

The canonical "what"

One trusted record for every asset — its owner, exposure and business criticality.

L1

Ingestion & Discovery

The boundary — where the platform meets the world
2 components
01

EdgeBridge

The integration boundary

Vendor-agnostic connectors across 15 security domains — files, APIs and protocols normalised into one platform feed.

02

Discovery Tools

Finds the unknown

Active outward scanning surfaces the servers, devices, databases and infrastructure you never knew you had.

Agentic AI / LLM Fabric

Reasons alongside every layer — enriching, correlating, drafting and recommending end to end.

CROSS-CUTTING · ALL 5 LAYERS

↑ Raw signal in at L1 · coordinated action out at L5 · data flows upward

The solution

How Converge360™ addresses these challenges.

Five platform capabilities map directly onto the four failures of fragmentation — each turning a chronic weakness into an operational strength.

1

Unified security visibility

Singularity Dashboard · L1 + L5

Agent-less, real-time visibility across on-premises, cloud, hybrid and remote — aggregating IAM, SIEM, DLP, EDR, CSPM, GRC and third-party APIs into one Security Graph, with XDR-ready architecture.

OUTCOMENo tab-switching, blind spots or context gaps — one 360° live view of your posture.
2

AI-driven threat intelligence & posture management

AI-SPM Engine · L3

Predictive analytics, behavioural baselining and LLM-powered enrichment turn raw logs into plain-language insight, flag anomalies, and visualise attack paths to block lateral movement before it spreads.

OUTCOME · +30% DETECTION ACCURACY (GARTNER 2024)Earlier detection of stealthy, multi-stage attacks through contextual threat modelling.
3

SOAR integration & adaptive automation

Visual Playbook Builder · L4

Native integration with 300+ security tools, event-driven no-code/low-code workflows, and playbooks with trust-level scoring and escalation logic that optimise time-to-detect and time-to-contain.

OUTCOME · −60% RESOLUTION TIME (FORRESTER 2025)From triage to containment, every step automated — without sacrificing control.
4

Compliance, trust & audit-ready assurance

Trust Management Framework · Cross-cutting

Policy-aware automation aligned to ISO 27001, GDPR, NIST 800-53, SOC 2, HIPAA and MAS TRM / RMiT — continuously monitoring control effectiveness and generating evidence packs.

OUTCOME · −40% AUDIT-PREP TIME (PONEMON 2024)Always audit-ready, with provable, automated compliance hygiene.
5

Customisable workflows & adaptive operations

Dynamic Workflow Engine · L4

Bespoke response strategies with multi-channel alerting (Slack, Teams, email, SMS), customisable SLAs and escalations, role-based segmentation, and Supply Chain Detection & Response (SCDR) for third-party risk.

OUTCOMEAgile, mission-aware operations that scale and evolve with the business.
The agentic AI / LLM fabric

Intelligence isn't bolted on. It's woven through.

Most platforms stop at aggregation. Converge360™ goes further. The agentic AI fabric threads through all five layers — de-noising signal at the edge, resolving entities in Foundation, drafting verdicts in Intelligence, running playbooks in Operations and writing executive narratives in Experience.

Read the solution whitepaper
Converge360 Agentic AI / LLM Fabric — reasoning across threat intel, identity, apps and data, infrastructure, endpoints and third parties, powering the executive dashboard

Cleaner signal at L1 & L2

Enriches incoming feeds, triages discovered candidates, and resolves duplicate identities and assets automatically.

Sharper verdicts at L3

Weighs ambiguous signals, drafts rationale behind each rule hit, and proposes the incident narrative — so analysts review conclusions, not assemble them.

Faster action at L4 & L5

Suggests the next best action, assigns and chases tasks, and writes plain-language executive narratives ready for the boardroom.

See the platform on your own stack.

A 30-minute walkthrough mapped to your environment, tools and regulators.

Book a guided demo