Welcome
Connect your perimeter.
Triage in 8 seconds.
We'll guide you through connecting your detection and correlation sources. Takes ~5 minutes. No agents to deploy.
🔐
OAuth2 or API Key
Authorize access directly — no network change, no open ports.
📈
Auto-discovery
DC counts your users and assets automatically from each source.
🛡
Live triage immediately
First alerts investigated within minutes of your first connection.
Step 1 — Detection sources
Who are your users
and assets?
Connect at least one source. DC counts your identities and endpoints to build your coverage baseline.
Microsoft
Identity
EDR
✓
ConnectedEntra ID users + Defender endpoints
CrowdStrike Falcon
EDR
✓
ConnectedEndpoints & device inventory
SentinelOne
EDR
✓
ConnectedEndpoints & device inventory
Okta
Identity
✓
ConnectedUser directory & identities
HarfangLab
EDR
✓
ConnectedEndpoints & device inventory
Wiz
Cloud assets
✓
ConnectedCloud workloads & assets
Step 2 — Correlation sources
Enrich every
investigation.
Optional but recommended. DC cross-references your SIEM, CMDB and network logs for full alert context.
📊
4 sourcesConnected
▼
Sp
Splunk
Token✓
Connected
Se
Microsoft Sentinel
OAuth2✓
Connected
El
Elasticsearch
API Key✓
Connected
QR
IBM QRadar
API Key✓
Connected
📄
3 sourcesConnected
▼
SN
ServiceNow
API Key✓
Connected
Tn
Tenable.io
API Key✓
Connected
Ql
Qualys
API Key✓
Connected
🌐
3 sourcesConnected
▼
Cf
Cloudflare
API Key✓
Connected
Zs
Zscaler
API Key✓
Connected
Fg
Fortigate
API Key✓
Connected
Ready
Your SOC is
live.
Decision Center is analyzing your environment. First triage results will appear within minutes.
Users discovered
0
identities across all connected sources
Assets discovered
0
endpoints, cloud & network assets
Detection sources
0
—
Est. tokens / month
—
1,500 tokens per asset
What happens next
1
Baseline established
DC builds behavior baselines for every user and asset over 24h.
2
First triage results
Active alerts from your connected EDRs are investigated automatically.
3
Configure alerts
Set up Slack or webhook to receive only confirmed, escalated incidents.