Hey Product Hunt 👋 I'm Javon, the person behind PingTraceSSH. I built SOC-in-a-Box because I kept watching the same thing happen — someone decides to set up a homelab SOC, spends a weekend on it, hits the third broken config in a row, and gives up. I did it too. More than once. The tools themselves are incredible. Wazuh is legitimately enterprise-grade. DFIR-IRIS is what actual incident responders use. MISP is how threat intel gets shared at scale. But getting all of them running, integrated, and actually talking to each other takes days — and that's days you could be spending learning how to use them, not fight them. So I pre-built it. Every config, every cert, every integration — done. You import an OVA, boot it, and you have a working SOC. That's the whole idea. Happy to answer anything — how it's built, what's inside, how to point it at your own network, anything. Ask away and I'll reply to every comment today. If you're a homelab builder, a security student, or you've ever had a half-finished SOC sitting on a VM you forgot about — this is for you. (And SOC-in-a-Box is just one piece — the full PingTraceSSH Arsenal has 9 pre-built tools: a NOC VM, a CLI ToolBox VM, and script packs for BGP, subnetting, packet capture, CIS hardening, IDS/SIEM tuning, and Vault secrets management. There's also a set of completely free networking tools on the site — subnet calculator, traceroute map, DNS propagation checker, Cisco/Juniper/Arista config generator, and more. No signup. Go play with them even if a SOC isn't your thing.)

SOC-in-a-Box

Stop building your SOC. Import it. Boot it. Use it.

Stop building your SOC. Import it. Boot it. Use it.