ScienceLogic Skylar One: Monitoring Ledger 2026

Part of the Infrastructure Monitoring Ledger (edition 2026-10-04). How the scores work: methodology.

Snapshot

Tier: Challenger
Owner: ScienceLogic, Inc. (Reston, VA), privately held; investors include Silver Lake Waterman, Goldman Sachs, Intel Capital, NEA
Licence model: Annual subscription by device category in Standard, Professional and Premier tiers
Products scored: SL1 8.x to 12.5, renamed Skylar One 12.6 and 12.7, with PowerFlow, Skylar Compliance (Restorepoint) and Skylar AI; SaaS edition not scored
Latest release: Skylar One 12.7, 2026-04-14
Next signal: Closed-loop autonomous remediation and wider Skylar Compliance; no dated release named
Archetype: MSP-grade AIOps platform
Evidence grade: B. Release notes and press releases cited, but the vendor, AI and security files disagree on several dates (RCA GA, Advisor GA, KEV date).

Scorecard

Dimension	Score	Direction
Capability today	88.2 / 100	higher is better
Momentum since end of 2022	+5.6 points	higher is better
Credibility	19.0 / 25	higher is better
Commercial risk	15.0 / 25	lower is better
Technical lock-in	17.0 / 25	lower is better
Integrator fit	15.5 / 20	higher is better
AI leverage	17.5 / 20	higher is better
Ledger Index	71.2 / 100	balanced weights

Capability by domain

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2016	2019	2022	Today
Server, virtualization and storage (12)	3.5	4	4	4.5
Network monitoring (12)	3	4	4.5	4.5
Application and service monitoring (10)	3	3.5	4	4
Data collection and scale (12)	3.5	4	4.5	4.5
Alerting and event management (12)	4	4.5	4.5	4.5
Visualisation and reporting (8)	3.5	4	4	4.5
Logs and traces (8)	2.5	2.5	3	4
Automation and remediation (8)	3.5	4	4.5	5
Security and compliance (8)	3.5	4	4.5	4
New-platform support (VMware exit) (10)	1	3	3.5	4.5
Total / 100	62.4	75.8	82.6	88.2

Year by year: 2016: 62.4 · 2017: 62.4 · 2018: 62.4 · 2019: 75.8 · 2020: 75.8 · 2021: 75.8 · 2022: 82.6 · 2023: 82.6 · 2024: 85.2 · 2025: 88.2 · 2026: 88.2

What moved the score

Year	Domain	Change	Points	Trigger
2019	Alerting and event management	4 → 4.5	+1.2	8.14: recurring maintenance windows; PagerDuty, Slack and xMatters notifications
2019	Application and service monitoring	3 → 3.5	+1.0	8.14: Business Service Views with health and availability rollup; web content checks
2019	Automation and remediation	3.5 → 4	+0.8	8.14: PowerFlow GA with ServiceNow CMDB, incident and change apps
2019	Data collection and scale	3.5 → 4	+1.2	8.14: 50,000+ devices; collectors buffer during network outages
2019	Network monitoring	3 → 4	+2.4	8.14: L2/L3 topology from CDP and LLDP, SD-WAN packs, native NetFlow/sFlow/IPFIX
2019	New-platform support (VMware exit)	1 → 3	+4.0	8.14: Nutanix AHV PowerPack via Prism API; Docker
2019	Security and compliance	3.5 → 4	+0.8	8.14: SAML SSO, mutual TLS to collectors, STIG-hardened appliance OS
2019	Server, virtualization and storage	3.5 → 4	+1.2	8.14: IPMI, iDRAC, iLO and UCS hardware packs; Nutanix AHV; Kubernetes pods
2019	Visualisation and reporting	3.5 → 4	+0.8	8.14: Dashboards v2 and business service maps
2022	Application and service monitoring	3.5 → 4	+1.0	11.3: tag-based service creation; ServiceNow CSDM sync; links to Dynatrace and AppDynamics
2022	Automation and remediation	4 → 4.5	+0.8	11.3: two-way ServiceNow, Jira and Cherwell sync; closed-loop fixes; Terraform and Ansible modules
2022	Data collection and scale	4 → 4.5	+1.2	11.3: streaming collection; HA and DR database clusters; 100,000 devices per cluster
2022	Logs and traces	2.5 → 3	+0.8	11.1 and 11.3: agent log collection and Zebrium log engine in preview, half credit
2022	Network monitoring	4 → 4.5	+1.2	11.2: Restorepoint config backup, diff and compliance GA for 100+ vendors
2022	New-platform support (VMware exit)	3 → 3.5	+1.0	11.3: Prism Central, Kubernetes discovery, OpenShift PowerPack, AWS, Azure, GCP
2022	Security and compliance	4 → 4.5	+0.8	11.3: FIPS 140-2 builds, CyberArk and Vault credentials, air-gapped installs
2024	Automation and remediation	4.5 → 5	+0.8	12.4: PowerFlow remediation playbooks; closed-loop workflows extended in 12.5
2024	Logs and traces	3 → 4	+1.6	12.3 and 12.4 (2024): log ingestion in core GA; OpenTelemetry collector GA
2024	New-platform support (VMware exit)	3.5 → 4	+1.0	12.3: Proxmox VE PowerPack preview, half step
2024	Security and compliance	4.5 → 4	-0.8	CVE-2024-9537 on CISA KEV 2024-10-21: minus 0.5 (the security record); MFA and PowerPack signing added after
2025	New-platform support (VMware exit)	4 → 4.5	+1.0	Skylar One 12.6 (2025): Proxmox VE GA; KubeVirt, OpenShift Virtualization, OpenStack; no XCP-ng
2025	Server, virtualization and storage	4 → 4.5	+1.2	Skylar One 12.6 (2025): Proxmox VE PowerPack GA; OpenShift Virtualization; documented 200,000 servers
2025	Visualisation and reporting	4 → 4.5	+0.8	Skylar One 12.6 (2025): console with rack, L2/L3 and service views; executive SLA reports

Direction, 2023 to 2026

Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2023-05	12.1: mandatory move to Oracle Linux 8; classic UI deprecated	D12 Packaging and licensing	U
2023-12	12.2: unified streaming collection; mutual TLS collectors	D4 Collection and scale	V
2024-06	12.3: Automated RCA GA in core; Aurora MySQL back end; Vault and CyberArk credentials	D7 AI-assisted operations	V
2024-07	Skylar AI suite launched	D7 AI-assisted operations	M
2024-10	CVE-2024-9537 exploited and added to CISA KEV	D9 Security	C
2024-12	12.4: OpenTelemetry collector GA; Advisor preview; PowerFlow remediation playbooks	D8 Logs and traces	M
2025-06	12.5: Skylar Compliance GA; NVIDIA GPU pack; closed-loop remediation	D2 Network	C
2025-10	Skylar One 12.6: SL1 renamed; Proxmox VE PowerPack GA; Advisor GA	D1 Server and virtualization	M
2026-04	12.7: official MCP server; gNMI telemetry; Oracle Linux 9	D11 Ecosystem openness	M

Centre of gravity: AI-assisted operations (2), Packaging and licensing (1), Collection and scale (1)
Driver mix: Vision 22%, Customer need 22%, Market window 44%, Upstream 11%, Portfolio 0%

Credibility: 19.0 / 25

Criterion	Score	Basis
Cadence	4	Two named releases a year from 8.x to 12.7, dates kept
Roadmap transparency	3	Public release notes per version; direction shown at Symposium and webinars; no public roadmap
Say-do	4.5	7 of 7 items 2023-2026 shipped with 0-1 month lag; Skylar Advisor came as preview in 12.4, GA only in 12.6
Velocity	4.5	Several capabilities per release: NCM, log root cause, OpenTelemetry, Proxmox, MCP in 2022-2026
Lifecycle stability	3	Forced moves to Oracle Linux 8 (12.1) and 9 (12.7); classic UI and Data Pull removed; three product names

Say-do record, 2023 to 2026: 7 items 2023-2026, all shipped with 0-1 month lag (Oracle Linux 8, streaming collection, Automated RCA, Advisor, Proxmox pack, Skylar One brand, MCP server). Advisor shipped as preview first and reached GA about 15 months after launch.

Commercial risk: 15 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	2	No metric change documented; AI and compliance placed in the Premier tier; SL1 renamed Skylar One 2025
Purchase constraints	4	Subscription only, tiered by device category; about $25,000-50,000 a year entry
Channel and access	3	Docs public; prices unpublished; sold direct and through certified partners; no public trial found
Owner stability	3	Private, venture and growth funded ($105M Series E led by Silver Lake Waterman, 2021); no exit announced
Cost of staying supported	3	Forced OS upgrades; Automated RCA, Compliance and Advisor need the top tier

Security record of the product itself: CVE-2024-9537 (SL1, remote code execution in a bundled third-party component): exploited at Rackspace in September 2024, fixed 2024-10-04 in 12.1.3, 12.2.3 and 11.3.2.6, added to CISA KEV 2024-10-21 per the security record (the release record says 2024-10-04). Security lowered by 0.5. CVE-2021-36742 and CVE-2023-4012 are not on KEV.

Technical lock-in: 17.0 / 25 (lower is better)

Criterion	Score	Basis
Formats	4	Monitoring logic in proprietary PowerPacks (XML, JSON, Python); proprietary MariaDB schema
Export path	3.5	Data readable via REST and GraphQL; no export or import tools for other products
Stack coupling	4	Own appliance OS, database and collectors; standard SNMP, WMI, OpenTelemetry and gNMI intake
Hardware / cloud coupling	2	Virtual or physical appliances on any hypervisor; air-gapped supported
Skills and tooling coupling	3.5	Dynamic Application and PowerFlow authoring skills are vendor-specific

Integrator fit: 15.5 / 20

Criterion	Score	Basis
Partner programme openness	3.5	Widely used by MSPs and integrators (Cisco, CDW, NTT); programme terms not documented
Multi-tenancy and self-service	4.5	Native multi-tenant organisations, hierarchical RBAC and automated client onboarding
API and infrastructure-as-code	4	REST and GraphQL APIs, PowerFlow, Terraform and Ansible modules
Skills and certification	3.5	ScienceLogic Certified Professional and Expert credentials

AI leverage: 17.5 / 20

Strand	Today	Latest step
AIOps on monitoring data	4.5	2024: 12.3: Automated RCA from logs GA; NVIDIA GPU PowerPack (12.2.4)
AI platform stack	4	2025: Skylar One 12.6: Skylar AI suite (RCA, Analytics, Advisor) GA; on-premises LLM option
AI-assisted operations	5	2025: Skylar One 12.6: Advisor GA explains incidents and runs remediation on operator approval
Agent openness	4	2026: 12.7: official MCP server GA; governance controls not documented

AI say-do: 2 tracked, 2 GA (Automated RCA, Skylar Advisor), 0-1 month lag per the AI evidence; the release record shows Advisor as preview in 12.4 (2024-12) and GA in 12.6 (2025-10). The AI is ML anomaly detection, Zebrium log-based root cause and a generative assistant that triggers remediation on approval.

Reading

ScienceLogic is turning SL1, now Skylar One, into an AIOps platform where log-based root cause, a generative assistant and an MCP server sit on a multi-tenant monitoring core. Since 2023 it has shipped on schedule, adding config compliance, OpenTelemetry, Proxmox and MCP, but it also had an exploited zero-day on the CISA KEV list in 2024 and imposed OS upgrades. Buyers get one of the broadest feature sets in this Ledger, at the cost of appliance coupling, proprietary PowerPacks and top-tier pricing for the AI features.

Open questions and evidence caveats

Dates conflict: Automated RCA GA 2023-06 in the AI evidence vs 12.3 in 2024-06 in the release record; KEV date 2024-10-04 vs 2024-10-21 (security record used).
Scale and noise claims (200,000 servers, 10 million metrics a minute, 90% noise reduction) are vendor statements, not tested.
Terraform and Ansible modules are cited without naming official providers, so the API score may be high.
Release code names repeat (Kyoto for 8.14 and 12.5), so parts of the timeline need checking.