PocketSOC: EDR Security Alerts

View detections from your own CrowdStrike, Defender, or GuardDuty tenant, free. Pro adds one-tap containment and critical push alerts. 7-day free trial.

Your on-call phone buzzes at 2 AM: a critical detection from your EDR. With PocketSOC you triage it, review the process tree, and contain the compromised host - without opening your laptop.

PocketSOC is a mobile SOC for on-call security analysts, security engineers, and MSP operators. It brings detections from CrowdStrike, Microsoft Defender for Endpoint, Microsoft Defender for Cloud, and AWS GuardDuty into one native view.

CONNECT YOUR OWN TENANT IN ABOUT 2 MINUTES Personal Use mode talks directly to your own vendor APIs. Enter your API credentials and PocketSOC starts pulling detections immediately - no backend onboarding, no sales call.

FREE - UNLIMITED VIEWING

• Unified detections list across connected vendors
• Full detection detail: host, user, process, severity, MITRE ATT&CK mapping
• Process graphs and correlation timelines across related detections
• Connect your first security vendor at no cost

PRO - ACT FROM YOUR PHONE

• Contain a compromised host with one tap
• Cross-vendor containment actions
• Close, assign, and set disposition on alerts
• Push notifications for new critical detections
• Connect a second (or more) security vendor

YOUR CREDENTIALS STAY ON YOUR DEVICE In Personal Use mode your vendor API credentials never pass through a WeaveHub server. They are stored encrypted on-device and used only to call the vendor's own API, directly from your phone. Biometric app lock included. No advertising ID collection.

ORGANIZATION MODE Teams can connect to their organization's PocketSOC deployment for shared visibility, centralized management, and Splunk integration. Organization accounts are provisioned by your admin.

SUBSCRIPTION DETAILS PocketSOC Pro is $9.99/month or $99.99/year, each with a 7-day free trial. Payment is charged to your Apple Account at confirmation of purchase. The subscription renews automatically unless cancelled at least 24 hours before the end of the current period. Manage or cancel anytime in your Apple Account settings. Viewing detections remains free without a subscription.

Terms of Service and Privacy Policy: https://www.pocketsoc.com/terms and https://www.pocketsoc.com/privacy

CrowdStrike, Microsoft Defender, and AWS GuardDuty are trademarks of their respective owners. PocketSOC is an independent product and is not affiliated with or endorsed by these vendors.