Passive-first security operations
Authenticated workspace for monthly SOC reconnaissance, technology detection, CVE validation, reporting, and audit trails.
Secure access
Enter your operator credentials to open the recon workspace.
Verifying secure session
Command center
SOC+ operations console
Use the modules below to scan exposed assets, investigate indicators, review historical records, and keep intelligence providers connected.
Integrated platforms
Operator guide
Event log
Scope Library
| Period | Scanned by | Institution | Domain | IP | Ports | Technologies | CVEs | Actions |
|---|
API integrations
Manage the OSINT and passive-recon providers SOC+ can query during investigations. Add one API key per source, test it before saving, and keep secrets stored only in the local .env file.
Live audit trail
The Live VM Sandbox needs Docker and the soc-sandbox:latest image on the host. Failing checks:
Opens in an isolated Chrome session on a dedicated sandbox network. You can click and interact live.
Drag & drop a file here, or browse
Mounted read-only at /input. ExifTool, binwalk & strings run automatically. Max 25 MB.
Low-resource profile: one session, 0.5 CPU core, 512 MB RAM, five-minute hard limit.
Starting isolated browser…
All session data has been destroyed.
| User | Role | Team | Status | Last update | Actions |
|---|
Broadcast
Inbox preview