Rule lifecycle

Rule lifecycle is the set of states a rule moves through, from draft and test to production, scheduled for deprecation and retired. Named states let a team see what is live and what is being phased out. Without them, old rules pile up.

What Rule lifecycle means here

States should drive behaviour: a draft rule does not page anyone, a deprecated rule stops running on a date.

Lifecycle describes maintenance. It is not the same as health, which describes how a live rule is behaving.

Example of Rule lifecycle in Sekoia documentation

Sekoia's Rule Lifecycle has three states, Active, Scheduled for Deprecation and Deprecated, with a valid-until date and notifications. docs.sekoia.com read 2026-11-03

Terms related to Rule lifecycle

• Deprecation: Deprecation is retiring a rule on purpose: marking it, warning its users and turning it off on a date.
• Rule versioning: Rule versioning keeps every revision of a rule so you can see what changed, who changed it and when.
• Rule health: Rule health is whether a detection still runs, still sees its data and still earns its alerts.

The matrix scores platforms on whether they document these ideas: see the matrix and the full glossary.