SOC Watch

SOC Watch turns cybersecurity incident response into an idle strategy game.

You're running a Security Operations Center under constant attack. Incident waves spawn continuously and travel toward your core — your job is to keep three defense layers upgraded and firing fast enough to neutralize them before they breach your absorption capacity:

• EDR — your first line of detection and response

• SIEM — correlates and escalates what EDR can't catch alone

• Threat Intel — the deepest layer, holding the line when everything else is overwhelmed

Each layer has its own Cadence (fire rate), Neutralize (success chance), and Budget/Kill (reward) upgrades — spend your budget wisely as incident waves grow larger and Major Incidents test your defenses every ten waves.

If your absorption capacity runs out, it's a full breach: a post-mortem kicks in with a permanent bonus for your next run, and you start over stronger than before. Progress keeps ticking while you're away too — come back to a "welcome back" bonus, with the option to watch a single optional ad to double it.

No account, no pressure, no pay-to-win — just watch the wave counter climb and see how long your SOC can hold.