How sochub is built, plus the detection engineering, incident response and AI-security thinking that shaped it.
sochub is now open source. The latest round was built mostly by describing features in plain English to an AI agent — here's what that actually looked like, including the parts where the vibe broke and judgment had to take over.
A multi-tenant, AI-assisted SOC case management system built for security teams that have outgrown Jira but can't justify the enterprise SIEM-adjacent platforms.
Building the infrastructure that turns raw cloud logs into actionable intelligence — from ingest pipelines to AI-powered signals and GitOps-managed detection rules.
How to stress-test your incident response program before a real attack does it for you. Introducing SIRAS, an open-source simulation tool for exposing detection blind spots.
The same DevSecOps principles apply to AI/ML systems — but the execution is completely different. Non-determinism, agentic behavior, and a new attack surface most teams aren't ready for.
Generating alerts is easy. Building detection — the kind that actually tells you something — is a different discipline entirely. And it matters more than ever.