nustudio.ai
00NuPulse
A product on the harness · Reliability and self-healing

Stop getting faster at fixing the same failure.

Recovering faster each time is progress. Never seeing it again is the point.

NuPulse reads across the observability, service management, infrastructure and enterprise systems you already run, predicts the failure, prescribes the specific fix, acts inside your policy, and verifies it landed.

01The gap

Detection got good. Nothing after it did.

Your tools can see the problem. Nothing decides what to do about it, nothing is allowed to act, and nothing removes the reason it happened. So the same failure comes back next month, and your team handles it a little faster than last time.

73%

of organizations report outages caused by alerts that were seen and ignored

Splunk, State of Observability 2025

30%

of engineering time lost to manual repetitive work

Catchpoint, SRE Report 2025

10,675

tickets a month per organization, on average

HDI, State of Tech Support 2025

Most teams run two to ten monitoring tools and nothing reasons across them. The block is permission, not data: a rule that can decide, an agent that may act, a check that proves it landed, and a record of all three. That is an operating change rather than a data project, which is why most teams stall at stage three.

Where most teams are today
01Reactive
Someone reports it first
02Diagnostic
Anomalies detected, causes described
03Predictive
You know hours ahead. A person still acts
What needs permission
04Prescriptive
The specific action, costed and timed
05Orchestrated
Carried out across teams, inside policy
06Self-healing
Known classes close with nobody paged

Before anything runs unattended, four things have to hold.

Decision

Rules return the verdict. Model output cannot overrule it.

Action path

Executed by the owning team’s agent, under their credentials.

Verification

Not done until checked, and rolled back if it did not land.

Record

Which rule, which evidence, which system, who or what.

02The loop

Predict. Detect. Diagnose. Decide. Remediate. Verify. Learn.

Seven steps, one loop, and it gets smaller each time around. Three of them are where most teams have nothing at all, which is why their loop never shrinks however fast the middle runs.

Before it starts
01Predict
Saturation, resource drift, certificate expiry and dependency degradation forecast against the error budgetReleases scored against the incidents they historically cause
The incident
02Detect
Alert storms collapse into one problem with a ranked cause setTime to detect falls without new instrumentation
03Diagnose
Which component, which change, which owner, with the evidence citedA downstream symptom traced to an upstream change in another application
04Decide
A deterministic verdict against limits your team declared: risk tier, action limits, change window, run budgetWithout it, every fix needs a person in the middle
05Remediate
The agent runs the matched runbook: scale, restart, fail over, roll back, clear the queueThis is the step that moves time to restore
06Verify
Checked for whether it landed and whether anything downstream movedRolled back if not. Nothing counts as done until this passes
After it closes
07Learn
Occurrences clustered, the underlying class identifiedA structural fix raised with the evidence to get it funded
Why those three

Detect, diagnose, remediate and verify are the incident, and most teams run them well. Predict stops the loop starting, decide is what allows it to run without a person in the middle, and learn removes the reason it ran at all. A loop without those three can only ever get faster. With them it gets shorter, then rarer, then gone.

03What you get

Seven parts. Your team owns every one.

Not a black box that answers questions. Each part does one job, your engineers configure it, and any of them can be switched off without breaking the rest.

01
Signal indexYou use every tool you already own. Pulls from your platforms through their own interfaces, then indexes and compresses so an investigation costs a fraction of reading raw telemetry. This is what stops cost rising in step with alert volume.
Available today
02
Application mapYou see who owns it and what breaks next. A knowledge graph of who owns what and what depends on what, declared by your teams rather than inferred from telemetry, so it does not decay silently and route work to the wrong team.
In development
03
Reliability plannerYou get costed options, not a diagnosis. Reads the signal, calls the specialists it needs, re-plans after each step, and produces costed options with cited evidence.
Available today
04
Policy engineYou decide what may run unattended. Risk tier, action limits, change window, run budget, separation of duties. Your team writes the limits, per application and per environment.
Available today
05
Agent registryYou can kill any agent from one screen. One place to see every agent, what it may touch, which version is live, and a kill switch on each. Least privilege by default.
Available today
06
Resolution memoryYour tenth incident costs less than your first. Held per application and per class, in your tenant.
Available today
07
Decision recordYou answer an auditor in minutes. Which rule fired, which evidence was cited, which action ran, what the result was. Retrievable per decision, not reconstructed from logs.
Available today

Marked in development and not shipped capability: the declared knowledge graph for multi-hop reasoning across owners and dependencies, cross system entity resolution so a service carries one identity across observability, service management and delivery, and A2A interoperability so NuPulse agents work alongside the agents your teams and vendors already run, under one policy.

Your engineers and your agents share one context and one record. Autonomy is set once per application rather than approved action by action, because a queue does not scale and policy does.

A person asks, it answers

Question an application, a dependency or an objective in plain language and get a grounded answer with its evidence, instead of querying four tools first. Then delegate the work and keep watching it.

It decides and acts

Inside limits your team declared, it resolves the class and records what it did. Nobody is paged, because the limits were agreed once rather than per action. This is where self-healing lives.

It hands over, with context

Novel, ambiguous or out of limits. The engineer gets a diagnosis and options, not a raw alert. An exception path, not the main path.

04In practice

Every dashboard was green. The shipment still missed the cutoff.

Uptime measures a component. Your customers experience a process. Here is the same seven steps on one fault in a shared integration service, from the release that caused it to the check that stops the next one. Illustrative, and built only from systems in the target list below.

01
Flagged before it shippedChange risk scoring rates the release elevated two days out, because this integration service has caused three incidents in a year. The team ships inside the window anyway. That release is now watched.
Predict
02
Four tools, one problemDynatrace flags rising response time. Kafka shows failed integration messages. Azure reports delayed jobs. ServiceNow opens fourteen tickets across three teams. They collapse into one problem with a ranked cause set.
Detect
03
Two hops to the real causeThe symptom is traced to a deployment made two hours earlier, on a service owned by a different team than the one being paged.
Diagnose
04
Ranked by cost, cleared by ruleOrder capture is slowing and today’s shipment cutoff is at risk, so this outranks the two other open problems. Rules check risk tier, change window, blast radius and rollback policy. Rolling back inside the window is in policy, so it runs unattended.
Decide
05
The owning team’s agent, not oursThe rollback runs through Azure DevOps under the owning team’s credentials, through access that team already had. NuPulse holds none of its own.
Remediate
06
Proof, then closeOrder throughput recovers and downstream inventory updates resume. The fourteen tickets close against one fault. Had throughput not recovered, the rollback would have been reversed.
Verify
07
The last time it happensThe class is recorded with its evidence, and a pre-deploy check on that integration service is raised so the next release cannot repeat it.
Learn

Prioritized by consequence

Two services degrade at once. The one upstream of today’s orders is fixed first, and nobody has to guess.

Measured against your baseline

Time to detect and time to restore, repeat rate per class, share of incidents closed with nobody involved, escalation rate, tickets linked per fault, cost per resolved incident. Read from where you already define them, with the false positive rate published alongside rather than netted out.

Reported in business terms

Availability of a process, not only uptime of a component.

05Target systems

Built to read what you already run.

Read in place, through interfaces your platforms already publish. The systems below are the ones customers ask about most. The real constraint at scale is rate limits rather than model quality, so NuPulse indexes and compresses before it reasons, and carries a cost budget per run.

What it readsTarget systems, grouped by what they tell it
Observability and loggingSignals, metrics, traces and logs from platforms such as Splunk, Elastic, Datadog, Dynatrace, AppDynamics, New Relic, Grafana, Prometheus, OpenTelemetry, Loki, Sumo Logic, Azure Monitor, CloudWatch, Google Cloud Ops, ThousandEyes, SolarWinds, Zabbix, Instana and OpenSearch
Service management and on callTickets, problems, changes and paging from ServiceNow, Jira Service Management, BMC Helix, Freshservice, Cherwell, Zendesk, PagerDuty, Opsgenie, xMatters, Slack, Microsoft Teams and Statuspage
Delivery and infrastructureChanges, deployments and platforms: GitHub, GitLab, Azure DevOps, Jenkins, Argo CD, Terraform, Kubernetes, OpenShift, VMware, AWS, Azure, Google Cloud and Ansible
Applications and dataSystems of record and analytical platforms: SAP, Salesforce, Epic, Guidewire, Oracle, Dynamics, Snowflake, Databricks, Kafka, PostgreSQL, SQL Server, and mainframe through an adapter

Each is wired up per engagement rather than shipped as a named-vendor integration, through REST and GraphQL, MCP tools and servers, OpenTelemetry, Prometheus query, webhooks, syslog, JDBC and ODBC, queues or file drop. Adding a platform is configuration, not a build. Mainframe, midrange, thick client and packaged applications with no API at all are reached through a governed adapter inside your environment, under the same policy and the same record.

06Governance

Built so an automated action can be explained.

Deterministic gating

Risk is scored by rule, in milliseconds, before any action is offered. Nothing probabilistic sits between diagnosis and action.

Autonomy per agent, action and environment

Set by your team per application, never uniform across all of them.

Separation of duties

An agent that proposes a financially controlled change cannot approve it.

Decision lineage

Which rule, which evidence, which approver, which system wrote what.

Read only first

Every application starts in read only mode, with proposals graded against what your engineers actually did.

Rollback and kill switches

Revocable instantly, per agent, by whoever runs it. Least privilege identity, scoped in one place.

Language models only where the ambiguity is real

Classification and forecasting across hundreds of applications run on models that cost a fraction of a language model call. Language models are used for root cause on a novel incident, reading runbooks and change notes, weighing options and answering in plain language. That split is what keeps cost per resolved incident from scaling with alert volume.

Where it runs

Your cloud or on premises, with signals queried in place and data kept in region. Model choice per task, large hosted, mid tier, or self hosted inside your own environment where data cannot leave.

One path to a system of record

Every model call from every agent passes the same governance path, so there is no route by which a model reaches a system of record without a rule having decided first.

Progress is proven against the baseline you already hold, on the measures listed above. No number is claimed here that your own tooling cannot verify.

07Getting there

Whichever stage you are on now, that is where we start.

Most teams are at or just below stage three. We begin from what you already run, measured against the baseline you already hold. Every application starts read only, with proposals graded against what your engineers actually did.

Stage 1 or 2

Get ahead of the failure

You see anomalies and describe causes, but a person still decides and acts. Prediction, the rules engine, the action path, verification and the record are what get added.

Stage 3

Turn forecasts into action

You already know hours ahead. Forecasts become costed actions, and the classes you already trust start resolving inside the limits your team declares.

How we work

Forward deployed, inside your group

Engineers stand it up inside your SRE group and work alongside your team, starting from the systems you already run and the baseline you already hold.

Build it yourself

Take the parts, keep your product

The planner, rules engine, registry, memory and audit trail can sit behind your own interface. Your platform keeps its name, roadmap and data.

The target state: recurring incidents close without anyone being paged, novel ones arrive already diagnosed, and engineering time goes into removing classes of failure.

08Questions

Common questions.

Does NuPulse replace our observability platform?

No. It sits above and beside the tools you already run, reads them in place, and does not become the system of record.

Who runs NuPulse, and who acts?

Your SRE and operations group runs it. The team onboards applications, builds and tunes the agents, and declares what each one may do, acting through the operational access the team already holds. NuStudio does not operate it for you and does not hold credentials on your systems. Where an application team has built its own automation, NuPulse calls that instead of duplicating it.

Do application teams have to do anything?

Not to begin with. NuPulse reads what applications already emit through your existing observability, logging and ticketing platforms, so onboarding an application does not require its team to build anything. Application owners get involved when an action would touch something outside what the SRE group already operates, and at that point they set the limit once rather than approving each action.

Which systems can it read from?

Anything that exposes an API, through REST and GraphQL, MCP tools, OpenTelemetry, Prometheus query, webhooks, syslog, JDBC and ODBC, message queues or file drop. The only case needing different handling is a system with no API at all, reached through a governed adapter.

Is this all language models?

No, and deliberately so. Deterministic rules make every decision about whether an action may run. Statistical and classical machine learning handle the high volume work: anomaly detection, saturation and burn rate forecasting, alert clustering, deduplication, ticket classification and change risk scoring. Language models are used only where there is genuine ambiguity and unstructured evidence to reason over.

What happens when an agent gets something wrong?

Read only mode first, deterministic limits on what any action may touch, verification after every action, rollback, and a full record so a bad action is explained in minutes rather than argued about for a week. Because execution is owned locally, no single component holds enough privilege to affect every application at once. We do not claim the risk is zero.

How does NuPulse relate to NuStudio?

NuPulse is a product on the NuStudio runtime, using the same agent execution layer, semantic layer, memory, identity and access control, model routing and decision lineage as every other NuStudio product. Choosing NuPulse does not mean adopting a separate platform.

Which industries is it built for?

Any application portfolio large enough that no single team can see across it. NuPulse was engineered to the standard regulated sectors require, including healthcare, defense, financial services and insurance, because an automated action there has to be explainable to an auditor and not merely effective. The same product runs in consumer packaged goods, retail and distribution, manufacturing, logistics, energy, telecommunications, travel and the public sector.

Next

Start with the application nobody wants to touch.

It is usually the one that pages the most people and explains itself the least, which makes it the most useful place to begin.