SOC
See the product, then the docs
- Unified SOC is the briefing the docs describe.
- Academy and case studies use the same console language.
- Start a trial on your traffic — not a slide deck.
Resources
Docs, research, academy, and proof.
Everything buyers, operators, and partners need after the homepage.
Resource
Threat Atlas (live)
Live threat, malware, and ICS advisory intelligence.
Resource
Documentation
Architecture, operator, and deployment docs.
Resource
Academy
CDO, CDA, and OT Security Architect certifications.
Resource
Threat Research
TRU reports, detection packs, ISAC alignment.
Resource
Use cases
Detection paths and the modules that carry them.
Resource
Glossary
Purdue, IEC 62443, Modbus, PQC — defined plainly.
Resource
Roadmap & maturity
Live, partial, and roadmap features labeled honestly.
Resource
Proof of Value & SLA
Evaluation path, enterprise ranges, timeline, SLA.
Resource
Case studies
PoV stories — placeholders until client quotes land.
Resource
API reference
REST/GraphQL, SDKs, SCIM, export formats.
Resource
Compare
CyberDragon vs CrowdStrike & Tanium.
Resource
Support
Channels, response targets, and hypercare.
Resource
Leadership
Who owns which part of the platform.
Resource
Pricing (cloud plans)
Free trial, Standard, and Premium cloud plans.
Start here
Pick the path that matches your role.
| Role | What you are trying to answer | Where to go first |
|---|---|---|
| CISO | Board-level risk narrative, quantified exposure, and audit readiness | Executive reporting, FAIR scenario scoring, and signed evidence packets. |
| SOC Manager | Alert quality, MTTD, and analyst throughput | Kill-chain correlation instead of raw alerts, plus playbooks with approval gates. |
| OT / Plant Engineer | Nothing may disturb the process | Passive SPAN capture, no agents on PLCs, no command plane into L0–L2. |
| Compliance Lead | Control coverage and evidence on demand | Auto-mapped IEC 62443, NERC CIP, NIST CSF, ISO 27001, and SOC 2 controls. |
| MSSP Operator | Margin, isolation, and onboarding speed | PostgreSQL RLS tenancy, cross-tenant portfolio views, and white-label options. |
| Auditor | Can this record be trusted? | Tamper-evident hash chain with Ed25519 signatures and reproducible verification. |
Quantum
PQC is documented and shipped
- Readiness board matches the quantum-resilient pages.
- Hybrid JWTs live today.
- Glossary terms match the UI.
Evaluate in a week
Four steps from signup to a verified evidence packet.
01
Start the trial
Seven days, no credit card. A tenant is created immediately with sample Enterprise/OT telemetry loaded.
02
Connect a source
Point syslog at the tenant or deploy an Edge collector in software mode on a mirrored port.
03
Watch a kill chain form
Run a scenario and watch W15 / W60 / W24 correlation assemble it into one incident timeline.
04
Export evidence
Verify the hash chain and export an auditor packet before the trial window closes.
Vault
Evidence the case studies cite
- Verify + export is what PoV quotes talk about.
- Roadmap labels stay honest.
- Support can point you at the same tabs.
FAQ
Frequently asked questions.
What is the Threat Atlas?
A live view of exploited vulnerabilities, ransomware and malware activity, and CISA ICS advisories, refreshed continuously from public sources.
Where do I start as a buyer?
Compare for positioning, Use cases for detection paths, Proof of Value for the evaluation route, and the 7-day free trial to see it on your own traffic.
Start your 7-day free trial.
A dedicated CyberDragon tenant on your own traffic — not a slide deck. See kill-chain cyber defense on your network.