{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"EP286 Building an AI-pilled, solo vibe-coded, Clickhouse-based SIEM with Dan Lussier","description":"Can you build a fully functional, high-scale SIEM in just two weeks for under $7,000? In this episode of the Cloud Security Podcast, hosts Tim Peacock and Kyle Champlin sit down with long-time collaborator Dan Lucier, Founder of Nano, to unpack how he "vibe-coded" an entire SIEM from scratch during his end-of-year holiday break. Dan shares his journey of leveraging bleeding-edge AI code assistants to go from a Postgres prototype to a blazing-fast, production-ready SIEM built on Rust and ClickHouse. In this episode, we cover: \ud83d\udee0\ufe0f The $7,000 Stack: How Dan utilized Claude Code and Kubernetes to build a lean platform running on 2 vCPUs and 4GB RAM while ingesting 10\u201320 GB of data daily. \u26a1 Why ClickHouse? The database architectural decisions behind maintaining sub-second search speeds at massive scale. \ud83e\udd16 AI-Pilled but Cautious: Why Dan takes a surprisingly conservative approach to AI case closure and triage (and how it compares to Google's Triage and Investigation Agent). \ud83d\udcbb Detection as Code: How MCP (Model Context Protocol) servers and AI are leveling the playing field for smaller security teams. Whether you're an AI enthusiast, a data nerd, or a security leader looking at the "fourth wave" of SIEM, this episode is a masterclass in modern, rapid-fire software engineering. \ud83d\udc49 Subscribe, leave a review, and join the debate on our LinkedIn page! ","author_name":"Cloud Security Podcast by Google","author_url":"https:\/\/cloud.withgoogle.com\/cloudsecurity\/podcast\/","html":"