Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques

SOC Standard Operating Procedures — 170+ bilingual (EN/TH) vendor-agnostic SOPs, 50 playbooks, 36 Sigma rules. Build a SOC from zero.

Public-safe TR/EN product hub for MyVuln threat intelligence platform.

Self-hosted threat-intelligence desk for cyber defense teams.

A user-friendly and powerful tool to analyze Windows Security Events

SOAR Incident Containment Engine – An automated Security Orchestration, Automation, and Response (SOAR) platform designed to detect, analyze, and contain cybersecurity incidents through automated workflows, threat intelligence integration, and real-time response actions.

A centralized platform for threat intelligence and security operation management.

I-powered SIEM alert triage tool — MITRE ATT&CK mapping, IOC extraction, false positive reduction, and investigation playbooks using Claude AI

A professional, enterprise-grade Security Orchestration, Automation, and Response (SOAR) platform portfolio piece.

Enterprise Security Operations Center with AI-powered threat monitoring, incident response, MITRE ATT&CK mapping, and SOAR automation.

Technical project index for infrastructure operations, security monitoring, governed analytics, agent runtimes, and secure automation.

SecureSOC is a web-based Security Operations Center (SOC) dashboard that centralizes security monitoring, log management, threat detection, and incident response for enterprise networks.

Enterprise ServiceNow Vulnerability Response Automation Project

Agentic SOC (intelliSOC) is an AI-powered Security Operations Center platform built with React and FastAPI that enables autonomous threat investigation, security event analysis, and incident response through interactive workflows and real-world cybersecurity log simulations.

Public-safe cloud detection engineering lab with synthetic AWS events, detections-as-code, expected alerts, runbooks, validation, and dashboard.

SOC Weekly Brief — static site for soc-brief.pages.dev covering what's new in Sentinel, Defender, and Entra, written for SOC analysts (Eleventy + Cloudflare Pages)

SOC batch IP block/unblock desktop tool for importing alert exports and integrating with firewall adapters.

Red vs Blue Team SOC simulation platform. Practice real-time incident response and threat detection. Docker + FastAPI + React.

Single-file security operations portal — track security projects & recurring BAU tasks. Cloudflare Workers + D1, dashboards, audit log, and one-click board reports. Live demo inside.