Sigma Rule Validator
Paste a Sigma rule and check its required fields, level value and detection selection.
Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.
Sigma Rule Validator
How to use this tool
- Enter your values in the fields above.
- Press Generate to see the result.
- Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.
Worked example
A rule with title, logsource, a detection selection and level high passes with 0 issues.
What this tool does not do / Limits
This checks common structure in pasted text only. It is not a full official Sigma validation and it cannot judge whether the detection logic is correct.
Frequently asked questions
Does a pass mean the rule will work?
No. It means the common fields are present; the logic still needs testing against real logs.
What does it check?
Title, logsource, detection with a selection, and a recognised level value.
Related tools
JSON Studio
Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.
LiveRegex Tester
Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.
LiveSecurity Header and DNS Checker
Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).
Live