Soc

24/7 managed detection and response service for Microsoft 365 environments

IT alert management platform that consolidates alerts from multiple monitoring tools

Threat intelligence platform for detection, hunting, and remediation

Incident management platform with automation, workflows, and playbooks

Automated vulnerability scanning for HPE NonStop systems with CVE mapping

XDR platform with AI-powered threat detection, investigation, and response

Automated Security Control Assessment platform for SOC optimization

HYAS Insight is a threat intelligence platform that provides infrastructure intelligence and cyber threat hunting capabilities for security operations, fraud investigations, and adversary profiling.

An AI-powered SOC automation platform that performs autonomous alert triage, investigation, and incident response while augmenting human analyst capabilities.

An AI-powered security operations platform that automates alert investigation, triage, and response workflows for SOC analysts.

TheHive is a case management platform for security operations teams that facilitates incident response, threat analysis, and team collaboration.

AI-powered security operations platform for automated threat analysis and response

SCOT is a cybersecurity incident tracking and management platform that enables security operations centers to document, analyze, and coordinate responses to security events through collaborative workflows.

SOAR platform for orchestrating security products and automating SOC tasks

OSTrICa is an open source plugin-based framework that collects and visualizes threat intelligence data from various sources to help cybersecurity professionals correlate IoCs and enhance their defensive capabilities.

Web-based tool for incident response with easy local installation using Docker.

BlueTeam.Lab provides Terraform and Ansible scripts to deploy an orchestrated detection laboratory for testing attacks and forensic artifacts in a SOC-like Windows environment.

XDR platform with endpoint security and threat detection capabilities

Xcitium's unified zero-trust platform secures endpoints to cloud workloads using patented Zero Dwell technology, providing complete protection from ransomware and malware infections.

FIR is a Python-based cybersecurity incident management platform designed for CSIRTs, CERTs, and SOCs to create, track, and report security incidents.

PolySwarm is a malware intelligence marketplace that aggregates threat detection engines to provide early detection, unique samples, and higher accuracy.