Replace spreadsheets and expensive consultants with a continuous, data-driven SOC maturity platform. Benchmark against real peers. Track improvement over time.
Part A covers every dimension of SOC maturity — from strategy and governance through detection engineering, incident response, threat intelligence, and continuous improvement. Each question scored 0-5 with weighted importance.
Anonymised peer benchmarking across sectors. Know your percentile — not just your score.
Confidence bands tell you how reliable the result is before you present it to the board.
Beyond capability scoring, the platform includes the full SOC-CMM 2024 Advanced question bank — 273 Yes/No questions across 5 operational domains with importance weighting. The most comprehensive SOC assessment available, delivered as a SaaS workflow instead of a spreadsheet.
Every role sees exactly what they need — and nothing more.
Full customer isolation enforced at the database layer on every query. Self-hosted on your own infrastructure or managed cloud. Open-source components throughout — no vendor lock-in. Keycloak SSO with OAuth2 PKCE, RBAC, MFA. Prometheus + Grafana + Loki observability built in.
Domain scores aggregate from weighted question responses. Overall SOC score is the confidence-weighted mean across all domains.
Eight roles across two groups — internal platform team and customer organisation users. Every role scoped precisely.
Every question maps to one or more industry framework controls simultaneously — eliminating duplicate compliance work.
Container-based, open-source throughout. Deploy on any Linux server or your own cloud. Every component replaceable.
Built for organisations that handle sensitive security posture data. Privacy and security aren't features — they're the foundation.
Three phases. Each one delivers standalone value while building towards automated, continuous SOC maturity measurement.
No spreadsheets. No consultants. Just clear, actionable data about where your SOC stands — and where it needs to go.