The full feature tour
Everything you need to onboard, comply and mature a SOC client.
Three modules, one workflow - from a blank intake to living documents that land in the systems your team already runs.
Every team in one process
Sales, SOC managers, detection engineers, incident responders, compliance and leadership all work the same pipeline - playbooks, runbooks, detection sources, policies and SLAs produced as the work happens.
- Prospect & Scope
- Detection Engineering
- Playbooks & Runbooks
- Policies & Compliance
- SLAs & KPIs
- Go-Live
A guided, sector-aware intake turns a short session into a 13-document core onboarding pack - onboarding plan, IR framework, SLAs, KPIs, workshop programme, source runbooks, detection priorities, risk register and go-live checklist. Enterprise adds a 7-document extended package (20 in total), and the AI Document Advisor suggests from a 60-item catalogue beyond that. Everything a new SOC client needs. Nothing they don't.
- Three ways in: form, document upload auto-fill, or guided conversation
- Smart source suggestions from your environment, sector and frameworks
- Sector-calibrated questionnaire, not a generic template
- Detection priorities mapped to the client's actual data sources
- Risk register and go-live checklist generated in one pass
Scope the prospect while the deal is still live: capture their environment, estimate their ingestion volumes and model the cost against your own rates, and route the scope for technical sign-off. When they sign, the accepted scope converts straight into an intake, so the onboarding is already half built. Enterprise customers can send the scoping form straight to the prospect to fill in themselves.
- Source-by-source ingestion estimate: EPS, GB/day and storage by tier
- Cost modelling against your own rates, never a published price list
- Technical approval routing before anything is promised
- One click turns an accepted scope into a client onboarding
- Enterprise: send the scoping form straight to the prospect
Turn the onboarding plan into a live tracker: every log source moves from prerequisites to live with dual sign-off from your engineer and the client's source owner. Workshops send pre-meeting check-ins so meetings only cover what needs support, and the PM Agent watches for slippage, tells you who to chase, drafts the message and writes the status report.
- Per-source status pipeline with blockers and dual sign-off
- Client source owners get their own portal - no login, no licence
- Workshops with pre-meeting check-ins and auto meeting briefs
- PM Agent chase lists, drafted nudges and one-click status reports
Go-live is the start of the relationship, not the end of the project. Compile a branded welcome pack in one click, send a Day-1 baseline report the moment the first source goes live, and run a structured 30/60/90-day relationship cadence with health tracking, satisfaction pulses and one-click QBR packs.
- Welcome pack compiled from the delivered documents in one click
- Day-1 baseline report - auto-drafted when the first source goes live
- Account management: health RAG, AM assignment and relationship notes
- 30/60/90-day check-ins scheduled automatically at go-live, plus QBR packs on demand
Every artefact is written for the client in front of you - their sector, sources, regulation and maturity. Export to PDF and DOCX, or push straight into the systems your team already uses.
- No boilerplate - content generated per client
- PDF and DOCX export
- Consistent house style across every pack
Generate a High-Level Design, Low-Level Design and Architecture Decision Record for each onboarding - board and architecture-review ready - plus compiled Team Setup Guides that give every source-owner team exactly their steps. Included on Enterprise and Platform; Starter and Professional see full watermarked previews and can unlock export with a one-off purchase - no regeneration, instant unlock.
- HLD, LLD and ADR generated from the live engagement
- Team Setup Guides compiled per source-owner team
- Full watermarked preview on every plan - pay only to export
- AI 'Explain this' on prerequisite items, for your team and client source owners
Point-in-time artefacts drift out of date. Blueprint keeps a full version history so every pack reflects the current state of the engagement, with drift tracking as the client changes.
- Full version history per document
- Drift tracking against the live engagement
- Regenerate and compare without losing prior versions
Share a secure review link so clients can read, comment and approve their pack - no logins, no email attachments. Review activity flows back into your workflow.
- Secure client review links
- Comments and approvals captured in one place
- Review activity pushed to your connected tools
Map an engagement against CE+, ISO 27001, NCSC CAF, DSPT, FCA SYSC and SOC 2. Get a narrative gap analysis, evidence packs and a remediation roadmap - not just a red/amber/green grid.
- CE+, ISO 27001, NCSC CAF, DSPT, FCA SYSC, SOC 2
- Narrative gap analysis with remediation roadmap
- Evidence packs ready to hand to an assessor
Quarterly assessments benchmarked against real sector peers, with drift detection between reviews and a board-level annual SOC health report your client can act on.
- Quarterly assessments benchmarked against sector peers
- Drift detection between reviews
- Board-level annual SOC health report
Blueprint pushes generated documents, onboarding milestones, risks and client review activity into your CRM, PSA, ITSM and comms tools - HubSpot, SharePoint, Jira, Confluence, ServiceNow, Salesforce, Azure DevOps, Slack, Teams and signed webhooks.
- Native pushes into the tools you run
- Signed webhooks on every generation, completion, risk and comment
- 6,000+ tools via Zapier or Make
See it on your own client.
Try it free. No account, no card. First document pack in under 20 minutes.