Bokamba

Bokamba provides free, client-side tools for parsing logs, masking sensitive data, and extracting indicators, all running entirely in the browser without signup or uploads. It targets SOC analysts and detection engineers with tools like LogForge, LogScrub, and IOC Extractor. The platform is built by Onber Studio in Ankara and offers a free tier alongside a Pro subscription for advanced features.

The free tier includes unlimited lines and runs for LogForge and LogScrub, while the Pro plan costs $12 per month or $99 per year. Pro users gain AI-assisted mapping, synced pattern libraries, and bulk scrubbing capabilities. All core tools remain free forever with no metering on unlimited runs.

LogForge can output parsers in 12 formats including regex, Grok, Splunk, Elastic, Datadog, and Wazuh. LogScrub masks IPs, emails, hostnames, tokens, and secrets using consistent pseudonyms. IOC Extractor pulls indicators like file hashes and CVEs, while LogAnvil generates synthetic logs for testing pipelines.

The SIEM Sizing Calculator estimates EPS, daily ingest, and storage needs from a device inventory. RuleForge creates tuned Wazuh decoders and rule sets from mixed logs. OS_Regex Lab tests Wazuh regex patterns against lines and translates PCRE. These tools have no Pro tier restrictions.

LogForge detects timestamps, IPs, users, and status codes automatically, allowing users to rename or retype fields before copying a working parser. Users can paste raw lines from journalctl, nginx, or firewalls directly into the tool. The process happens entirely on the client side with no server uploads.

LogScrub ensures consistent pseudonyms by remembering original-to-replacement mappings across sessions so the same IP always becomes the same token. Custom patterns sync with the user's Pro key, and the dictionary remains stored locally in the browser. Bulk scrubbing to ZIP is also available for multiple files.

The IOC Extractor catches defanged indicators like hxxp://evil[.]com and flags private or benign noise. It exports structured data in STIX 2.1, MISP, CSV, and JSON formats. Users can paste threat reports or phishing emails to pull out IPs, domains, and URLs.

LogAnvil generates realistic synthetic logs for nginx, syslog, FortiGate, Windows, and JSON formats. It supports up to 1,000 lines per run and uses seeded and deterministic generation for pipeline testing and SIEM demos. The tool is part of the free core offering.

The website states that the engine generating parsers at build time also runs in the browser, ensuring consistency. It mentions that if a log line breaks a tool during beta testing, users are encouraged to email the specific line. The site presents documentation and a blog for further information.

The business is located in Ankara, Turkey, as indicated by the credit to Onber Studio. Contact methods such as a business phone number or email address are not explicitly listed in the provided text. The site offers shareable links where the whole state travels in the URL without server-side storage.

The core philosophy is that the tools run entirely in the browser with no account or card required for the free tier. There are no dark patterns or fake countdowns used in the pricing model. The SIEM sizing calculator helps estimate storage and retention from a device inventory.

The official website of Bokamba is bokamba.com.

On Trustburn, Bokamba has a rating of 4.6 out of 5 based on 5 reviews.