Skip to content

Tell me what just broke.
In plain English. In seconds.

StackSift watches your logs, fires alerts when something cascades, and explains the root cause with AI — built for solo devs and small teams, priced for them too.

[ERROR] 2026-03-27 02:14:33  NullReferenceException at UserService.cs:142
[WARN]  2026-03-27 02:14:33  Redis connection timeout after 30000ms
[ERROR] 2026-03-27 02:14:34  Database query exceeded timeout (pool exhausted)
[ERROR] 2026-03-27 02:14:34  NullReferenceException at UserService.cs:142
[ERROR] 2026-03-27 02:14:34  NullReferenceException at UserService.cs:142
... 395 more lines ...

45 minutes to 3 hours. Average time to root cause. At 2 AM. On a Tuesday.

How it works

  1. 01
    Connect

    Add the Serilog sink (.NET) or Winston transport (Node.js) to your app in ~5 lines. Or POST JSON directly with curl — full API reference in the docs.

  2. 02
    Stream

    Logs flow in, your dashboard updates live, and alerts fire on the patterns you care about.

  3. 03
    Resolve

    Click Analyze with AI on any incident. ~8 seconds later you have a root cause and a fix.

90 seconds. The whole pitch.

A real local stack. Real OpenAI call. No edits, no cuts. Captions on by default; transcript below.

Transcript
Transcript pending — drops in once the Loom recording is finalised.

Four things, done well.

Live streaming

See errors the moment they happen — no F5, no SSH-tail.

SignalR + Redis backplane

Smart alerts

Threshold and pattern rules. No PromQL.

LogBatchConsumer rule evaluation

AI root cause

gpt-4o-mini turns 400 log lines into one paragraph.

RAG pipeline · ai-rag-architecture.md

Past-incident memory

Every resolved incident teaches the AI about your system.

pgvector HNSW cosine top-3

Why not just use Datadog?

Because you’re not their customer. We’re not theirs either.

Datadog / New RelicStackSift
Designed for50-engineer teams with SRESolo devs · 2–8-engineer teams
Time to first useful insightA week of config10 minutes
Monthly cost (small team)$500–$5,000$0–$79
Root-cause explanation“Here’s a graph”“Here’s a paragraph that names the bug”
IntegrationProprietary agentOpen-source SDKs (Serilog, Winston) + plain HTTP

Pricing that fits in your Stripe statement.

No credit card to start. The SDKs are open source. Cancel any time.

Free
$0/mo
  • 1 project
  • 7-day retention
  • 10 AI analyses / mo
  • 1 user
Start free →
Indie
$19/mo
  • 5 projects
  • 30-day retention
  • 100 AI analyses / mo
  • 1 user
Start with Indie →
Team
$79/mo
  • Unlimited projects
  • 90-day retention
  • Unlimited AI analyses
  • Unlimited users + roles
Start with Team →

We’re a 3-person team. Your money goes into making this better, not into a sales department.

Trust, by design.

Multi-tenant by construction

Per-org Postgres rows, per-org Elasticsearch indices, per-org S3 key prefixes, per-org SignalR groups. You cannot see another tenant’s data even if a bug tries.

Auth handled by Keycloak

Industry-standard OIDC + PKCE. Tokens never touch JavaScript — only an HTTP-only session cookie.

Our SDKs are open source

Read the code before you ship it. StackSift.Serilog.Sink (NuGet) and @stacksift/winston-transport (npm) — both MIT-licensed on GitHub.

Questions, before you start.

How is this different from Datadog?+

Cheaper, simpler, and the AI summary is built in — not an add-on. We’re designed for one engineer; Datadog is designed for fifty.

How do I send logs to StackSift?+

Three options. (1) Official Serilog sink for .NET apps — five lines of LoggerConfiguration. (2) Official Winston transport for Node.js apps — one transport added to your existing logger. (3) Direct HTTP POST from any language — full curl recipe and API reference in the docs. All three hit the same /api/v1/logs/ingest endpoint.

What happens if I exceed the AI-analysis cap?+

The Analyze button returns a graceful 402 and an upgrade nudge. Nothing else breaks. You upgrade in-app or wait until the month resets.

Do I need to change my application code?+

Yes, lightly. You add the StackSift sink or transport to your existing logger (Serilog or Winston) — about five lines. We do not run an agent on your servers and we do not tail files from disk.

How is my data isolated from other customers?+

Every entity carries an OrganizationId enforced at the repository level. Elasticsearch indices are per-org. S3 keys are namespaced per-org. SignalR groups are scoped per-project. Verified by integration tests.

Can I delete my data?+

Yes. Account deletion hard-deletes all rows, ES indices, and S3 objects. No tombstones.

You are one ingest call away from never grepping log files at 2 AM again.

Start free →