// browser-based analyser workspaces

Paste your alert.
Get your verdict.
Nothing leaves your browser.

Browser-based SOC analyser workspaces covering the alerts you investigate most — phishing, QR phishing, alert triage, ransomware, credential dumping, VPC flow logs, Windows Event Logs, and more. Paste raw data for an instant verdict: severity, MITRE mapping, false-positive checks, and a ready-to-paste incident note. Optional AI handoff to ChatGPT or Claude for deeper investigation. No login. No data uploaded.

paste alert data instant browser triage optional AI handoff

No login required·All analysis runs in your browser·Built for real investigations

Browser-only — no data uploaded
No login required
7 instant analyst workspaces
Optional AI handoff to ChatGPT or Claude
Free for defenders

// how it works

From alert to verdict in minutes

[01]

Pick an analyser for your alert type

Seven workspaces, each built for a specific alert type — phishing email, ransomware, credential dumping, VPC flow logs, Windows Event Logs, phishing URLs, and alert triage.

[02]

Paste your alert data and get an instant verdict

Everything runs in your browser — no data uploaded, no login required. Paste raw alert data and the workspace returns severity, MITRE mapping, false-positive checks, and a ready-to-paste incident note.

[03]

Go deeper with an optional AI handoff

Use the built-in action buttons to copy a structured prompt for ChatGPT or Claude. The prompt stays in your clipboard until you choose to paste it — nothing is sent automatically.

// instant analyser workspaces

SOC Analyser Workspaces

analyser workspace / investigation sequence
Phishing Analysis 🔥 most used ⚡ Instant Analyser
analyse email extract headers verify sender verdict
Beginner
SOC Alert Triage 🔥 most used ⚡ Instant Analyser
classify alert check context correlate prioritise
Beginner
QR Phishing Analyser ⚡ Instant Analyser
decode QR inspect destination assess risk verdict
Beginner
Ransomware Triage ⚡ Instant Analyser
detect indicators blast radius contain spread incident report
IR
AWS VPC Flow Log Analysis ⚡ Instant Analyser
pull flow logs filter anomalies map IPs verdict
Cloud
Credential Dumping ⚡ Instant Analyser
identify tool check privileges review access logs verdict
Advanced
URL Analysis ⚡ Instant Analyser
extract URLs detect indicators score & verdict block or clear
Advanced
Windows Event Log Analysis ⚡ Instant Analyser
parse events detect patterns correlate chains triage & contain
Advanced
// investigation guides — structured manual workflows
Suspicious PowerShell Investigation Manual Guide
decode command check parent process review execution investigation notes
Advanced
Identity Compromise Investigation Manual Guide
review login events check MFA correlate geo investigation notes
Advanced
Explain This Security Alert Manual Guide
parse alert map to MITRE assess severity investigation notes
Beginner

// faq

Common questions

> Do I need to sign up?
// No. Pick a workflow and start immediately. No account, no email, no friction.
> Is this for beginners or experts?
// Both. Junior analysts follow the steps to build confidence. Senior analysts use it to move faster and document better.
> How is this different from Google?
// Structured investigation workflows, not search results. Each one tells you exactly what to check and in what order — built around real SOC scenarios.
> Is it free?
// Yes, completely free. Always will be for defenders.

Built by a defender, for defenders.

SOC.Workflows started from a simple frustration — AI tools are powerful, but most security analysts don't know how to prompt them effectively for real investigation work.

These workflows are different. Each one is structured, step-by-step, and built around real SOC scenarios. Not generic prompts. Not marketing fluff. Just guided inputs that help you investigate faster and document better.

Currently free. Always will be for defenders.

Get in Touch

Questions, feedback, or just want to say hello — reach us at gauravkundu12@gmail.com

Stay updated

Stay Updated

Get notified when new workflows are added. No spam. Unsubscribe anytime.

Free forever New workflows monthly No spam

Get new workflows in your inbox

Stay updated when new SOC workflows drop. No spam, unsubscribe anytime.