Detect, respond and recover — with your SOC, incidents, threats and vulnerabilities connected to the risks they affect.
12 modules · 83 capabilities
Brand Protection
Register impersonation findings from any source and run takedowns to completion: authority directory, evidence capture, SLA tracking and escalation.
Impersonation register · Verdict and severity triage · Evidence capture and sealing · Takedown case management · Takedown authority directory · SLA tracking and escalation · Vendor feed intake · Excel and PDF export
Asset Management
Asset inventory with manual/upload/scan/discovery + CMDB, tagging, ownership, lifecycle.
Manual entry · CSV / bulk upload · Network scan · Auto-discovery · Cloud inventory sync · CMDB integration · Tagging + custom fields · Ownership tracking · Lifecycle management · Software inventory
Vulnerability Management
Vulnerability tracking, scanner integrations, SLA-driven remediation, exceptions.
Tracking · PT/VA CSV import · Tenable.io adapter · Qualys VMDR adapter · Rapid7 InsightVM adapter · Nessus XML parser · OpenVAS XML parser · SLA-driven workflow · Exception workflow · Fix verification · Auto-suggest mitigations · Bulk operations
Incident Management
Full incident lifecycle: detection → containment → recovery → post-mortem.
Full lifecycle · Playbooks · Regulator notifications · Post-mortem workflow · Root cause analysis · Timeline reconstruction · Stakeholder communications · Live war room · Chain-of-custody evidence
SOC Operations
Full SOC workflow: shifts, checklists, alerts, handoffs, sensors, metrics, playbooks.
Shift management · Shift checklists · Alert triage workflow · Shift handoffs · Sensor / tool inventory · Escalation rules · Shift post-mortem · SOC metrics dashboard · Playbook execution · Runbook management
Threat Intelligence
IOC feeds, threat actor tracking, TTP mapping, hunting queries, sharing.
IOC management · Threat actor tracking · TTP / MITRE mapping · External feed ingestion · Hunting queries · Threat sharing (STIX/TAXII) · Campaign tracking
Tabletop Exercises
Scenario-based crisis exercises, participant tracking, after-action reports.
Scenario library · Session facilitation · Participant tracking · After-action reports · Lessons learned
Insider Risk
Insider risk scoring, watchlist, behavioral indicators, remediation.
Risk scoring · Watchlist management · Behavioral indicators · Alert workflow · Remediation actions
Crown Jewel Analysis
Critical asset identification, threat modeling, business impact analysis.
Critical asset identification · Threat modeling · Business impact analysis
Penetration Testing
PT campaigns, finding import, remediation workflow, evidence.
PT campaigns · Findings import · Remediation workflow · Evidence attachments
Ticketing (ITSM)
Ticket queues, SLA tracking, assignment, settings.
Ticket queues · SLA tracking · Assignment rules
Visitor Management
Visitor requests, approvals, front-desk check-in and the physical security roster.
Visit requests and approvals · Front desk check-in and out · Badge inventory · Blocklist · Security officer roster · Visitor reporting and export · Physical security incident register
