> ## Documentation Index > Fetch the complete documentation index at: https://docs.insecureweb.com/llms.txt > Use this file to discover all available pages before exploring further. # Introduction to UTMStack v11 > Welcome to UTMStack v11 - A Major Evolution in SIEM and XDR Technology UTMStack has officially released version 11.0.0, a major stable update that transforms its SIEM platform. This release introduces a redesigned architecture, stronger security, and a more intuitive user experience—positioning UTMStack to meet the demands of modern cybersecurity operations. UTMStack v11 Architecture Diagram UTMStack v11 Architecture Diagram ## Overview Welcome to the UTMStack open-source project! UTMStack is a unified threat management platform that merges **SIEM** (Security Information and Event Management) and **XDR** (Extended Detection and Response) technologies. Our unique approach allows real-time correlation of log data, threat intelligence, and malware activity patterns from multiple sources, enabling the identification and halting of complex threats that use stealthy techniques. Experience UTMStack in action with our live demo *** ## Important: Fresh Installation Required UTMStack v11 can only be installed on **new instances**. * Direct upgrades from v10 are not supported * v11 includes architectural changes incompatible with previous versions * If you're currently using v10, keep it running on its existing infrastructure * Deploy v11 on a separate, new server instance For migration planning and assistance, please contact UTMStack support. *** ## What's New in v11 ### 1. Performance and Scalability * Replaced Logstash with **EventProcessor** (developed by Threatwinds) * Drastically reduced resource usage * Improved log processing speed significantly * New architecture using two container types: **manager** and **worker** * Each container capable of running plugins and processing data in parallel * Add additional workers to scale horizontally and eliminate bottlenecks ### 2. Modular Plugin Architecture * New official plugin system for independent feature integration * Improved maintainability and code organization * Easier platform expansion and customization * Community-friendly architecture for contributions ### 3. Enhanced Security * Strengthened TLS protocols across all components * **Multi-Factor Authentication (MFA) is now mandatory** for platform access * Elevated protection against unauthorized access * Enhanced encryption for all data in transit * Daily code reviews for vulnerable dependencies * Yearly penetration testing and testing after major releases ### 4. SOC-AI with Custom Model Support * SOC-AI module now supports **user-defined machine learning models** * Official models available out-of-the-box * Tailor threat detection and response to your organization's needs * Advanced analysis and automated insights ### 5. Improved User Experience * **Completely redesigned graphical interface** for better usability * Incident Response module renamed to **SOAR** (Security Orchestration, Automation and Response) * Automated workflows for alert handling * Simplified rule creation with a **visual editor** * Advanced YAML configurations still supported for power users * Log filtering moved from complex Logstash syntax to **accessible YAML format** ### 6. Centralized Management and Flexible Deployment * All UTMStack instances can connect to a **central server** * Remote log submission capabilities * Centralized updates across all instances * **Multi-platform support**: Ubuntu and Red Hat systems * **Offline, on-premise deployments** supported with guided assistance * **Automatic updates** can be scheduled from the central server * No manual intervention required to keep systems current *** ## Core Features Advanced real-time log analysis and correlation engine Identify and respond to threats in real-time Integrated threat intelligence feeds and analysis Comprehensive alert investigation and forensics Automated file analysis and classification Machine learning-driven security analysis Built-in compliance management and reporting Automated security orchestration and response *** ## Why Choose UTMStack v11? UTMStack stands out in threat prevention by surpassing the boundaries of traditional systems. Our software platform can swiftly analyze log data to identify and halt threats at their source in real-time, even if the threat was not directly detected on the server itself. ### Key Differentiators * **Real-time correlation before data ingestion** - reduces workload and improves response times * **Seamless SIEM and XDR integration** - unified threat management in a single platform * **Horizontal scalability** - add workers as your organization grows * **Open-source foundation** - transparent, community-driven development * **Enterprise-ready** - suitable for production environments and modern SOC operations *** ## Getting Started Step-by-step instructions to install UTMStack v11 Try UTMStack without installing anything Watch our feature overview and tutorials Explore the complete API reference *** ## Community and Support Complete documentation and guides Learn how to contribute to the project Community-driven correlation rules Join our community discussions *** ## Summary UTMStack v11.0.0 marks a major evolution of the platform. With improvements in performance, scalability, security, and usability, this version is ready for production environments and modern SOC operations. For technical documentation, migration assistance, or enterprise support, visit [https://docs.utmstack.com/](https://docs.utmstack.com/) or contact the UTMStack team.