Product

Every feature here exists because a SOC needed it.

Rotations built to your pattern, or solved from your rules. Coverage you can prove to a client. A fairness ledger an analyst can take apart. Handover that survives the gap between shifts and between offices. Every client’s coverage measured across every office that serves it.

01 · Automated scheduling

Stop rebuilding the rotation every month.

Build the rotation once and extend it for as long as you need. Describe a repeating pattern, or state the demand and the rules and let the solver work out who goes where.

  • Pattern mode: a repeating cycle each analyst follows, staggered across the crew and extended nightly.
  • Rule mode: each window solved against what every shift needs — tier, team lead, a named qualification — and your rules on rest, pairing, weekends and balance, kept topped up nightly.
  • Working-time law is the floor. A solved roster is checked against your rules before a shift is written, and anything it could not fill is listed with the rule that blocked it.
  • Approved leave is never written over, a shift you place by hand stays where you put it, and anyone who never rotates stays pinned in place.
Watch bands6-DAY CYCLE · 6 ANALYSTS
Bands
P1
Day
P2
Day
P3
Evening
P4
Evening
P5
Night
P6
Off
AnalystPatternOffsetToday
KPK. PatelT32-2-1-1+0Day
AOA. OkaforT22-2-1-1+1Day
MCM. ChenT22-2-1-1+2Evening
JLJ. LindqvistT22-2-1-1+3Evening
SRS. ReyesT12-2-1-1+4Night
RBR. BauerT12-2-1-1+5Off
generated through21 Aug 2026
roll-forwardnightly · 02:00 UTC
tier feasibility✓ T2 or above on every night
manual overrides preserved4
02 · AI Assistant

Ask it instead of hunting for it.

Iris, a chat panel over every dashboard page, answers who’s on call, whether next week has a gap, or how fairness landed this month — from your own rota, in plain language.

  • Sees schedules, rosters, leave, swaps, holidays, handover notes, fairness and coverage.
  • Ask it to book your leave, swap a shift or an on-call turn, send an availability note or write your handover — or, as a lead, approve requests, cover someone's leave or change a shift — and it lays it out for you to confirm. Nothing changes until you do, and the same checks as the page run when you press it.
  • It never generates or publishes a schedule, changes your rules, or touches who has access, and says so if you ask.
  • Runs through the same permission checks as the rest of the product; conversations stay inside your organisation and are saved privately.
  • Coming soonTurning an existing schedule, uploaded as a spreadsheet, into a rotation pattern.
Iris
Any open swap requests?
Two are waiting on you: R. Bauer for the Thu night shift, and a swap from T. Adeyemi for Mon 25 May — both pass the rest check.
Ask about your schedule…
03 · Leave and swaps

Approving stops being a calculation.

A request reaches a manager as a decision, not a puzzle: the shifts it empties, the coverage it costs, and the colleagues who could genuinely take them.

  • Half days, multi-day stretches and recurring absences, with the cover picked while you approve.
  • An allowance per leave type per year, granted up front or accrued monthly, counted in calendar or working days, with carry-over; every request shows what it uses and what it leaves, and approving over it records the overrun.
  • People who cannot cover are still listed, with the reason why.
  • Swaps go to a named colleague or an open board anyone free can claim, with the rest check already done.
  • A manager who lets one through against the rest rules leaves that on the record.
13 May 2026Evening16:00-00:001 still covering · min 2BELOW MIN
J. LindqvistT2 · off that day · 11h rest clear
ELIGIBLE
D. HassanT1 · off that day · 8h since night shift
rest window
M. ChenT2 · already on Evening
already working
1. PROPOSED
M. Chen
Night · Fri 15 May
2. PEER
S. Reyes
Accepted
3. MANAGER
You
Awaiting approval
Rest check✓ both parties
Coverage afterholds · 2/2
04 · Fairness ledger

End the argument about who always gets the weekends.

Every analyst sees their own position, the team average, and the arithmetic that produced both — so a disputed number can be taken apart instead of taken on trust.

  • Nights, evenings, weekends and holidays weigh what you decide; a weekend night on a public holiday counts as all three.
  • Every total comes apart into the shift, the weekend that fell on it and the holiday on top.
  • Rolling 30, 90 and 365-day views, so an imbalance that shows over a month but not a year is visible as a new one.
  • Anyone who does not rotate is listed with the reason rather than dropped from the average.
Fairness ledger90 DAYS · 6 IN ROTATION
Widest gap
42.2h
K. Patel carries the most
Average
168.0h
weighted, per analyst
Your position
−2.6h
level with the cohort
Where everyone sits
S. Reyes −21.2hK. Patel +21.0h
carrying lesslevelcarrying more
K. Patel · made up of189.0h
Shift weight156.0hWeekend uplift21.0hHoliday uplift12.0h
night · weight×1.50
weekend · holiday×1.25 · ×1.50
a night on a weekend8 × 1.50 × 1.25 = 15.0h
the same shift midweek12.0h
05 · Workspaces

One account, every office, each on its own clock.

Each office runs its own workspace, its own people, shift model, holidays and on-call, in its own timezone, so a team in Singapore is scheduled the way Singapore works, not the way another office does.

  • Add an office with its timezone and invite the people who sit there, its workspace carries its own rotation, leave policy, holiday calendar and on-call schedule.
  • Switch between office workspaces in the top bar, and see each one’s local time, who is on watch, and whether staffing holds.
  • Fairness, coverage and audit are kept per workspace, so one office’s numbers are never blurred by another’s.
Workspaces3 OFFICES · 23 PEOPLE
OfficeWorkspacePeopleOn-call
Singapore
Asia/Singapore
SG SOC
holidays · Singapore
6
Primary · weekly
London
Europe/London
UK SOC
holidays · England & Wales
9
Primary + Backup · weekly
Austin
America/Chicago
US SOC
holidays · United States
8
Primary · every 12 h
you are onLondon · UK SOC
switch toSingapore · SG SOC
fairness, coverage, auditper workspace
06 · Global view

What is happening everywhere, right now.

One board for the whole estate at this instant, every office in its local time, who is on watch, whether staffing holds, and who is on call, instead of switching schedules one at a time and holding the comparison in your head.

  • Offices read east to west, so the working day moves down the board.
  • Per office: local time, people on watch now, staffing against the minimums, how far ahead the schedule is generated, and requests waiting on a decision.
  • On call now on every schedule in the account, each in its own clock, with who takes over next.
  • Totals across the estate, on watch, schedules, at risk, pending, so the number you report is the one the board shows.
Global3 OFFICES · 14:20 UTC
00040812162024
Singapore
22:20 local
00–09
on watch 0staffing 100%runway 41d
London
15:20 local
08–17
on watch 4staffing 100%runway 38d
Austin
09:20 local
13–22
on watch 3staffing 92%runway 27d
on watch now7 across 2 offices
on call · LondonPrimary A. Okafor · Backup M. Reyes
on call · AustinPrimary J. Whitfield · Backup follows next turn
pending requests3 · Austin
07 · Clients and reporting

Prove the coverage you were paid for.

Every client carries the availability you promised them, and what every office delivered is measured against it for you each week, and for the client on a live page you share with them.

  • Each client has an SLA target and the offices that serve it, with this week’s coverage measured against the target.
  • Open a client to see the hours its offices are set to cover, what was actually worked today, and whether the week met the contract.
  • A live page for the client: this month’s coverage against the target, tier by tier, every shortfall listed counts.
  • The client’s page reads straight from the rotation every time it is opened, so nobody compiles a coverage report by hand.
Northwind FinancialSLA 99% · 3 OFFICES
00040812162024
Singapore
UTC+8
00–09
London
UTC+1
08–17
Austin
UTC−5
13–22
Chain
GAP
hand-off orderSingapore → London → Austin
overlap at hand-off60 min · 240 min
gap before Singapore picks up22:00–00:00 UTC · 120 min
managers alertedAustin · Singapore
08 · Handover

The incoming shift starts knowing what the last one knew.

Open incidents, live hunts and the thing that will page someone at 03:00 are written down before anyone clocks off, and waiting on screen when the next analyst logs in.

  • Built-in fields for incidents, hunts and escalations, or a form you design yourself.
  • You decide who owes each handover; a reminder reaches them half an hour before they finish.
  • Only the shift actually taking over can mark it read, and their name and the time stay on it.
  • Where a client moves between offices the note moves with it, and one trip around the chain is grouped so an office that passed nothing on is a visible blank.
Received fromLondon· Northwind Financialacknowledged 22:04 UTC

NightWed 13 May 2026

by R. Bauerowner for this slotupdated 05:51 UTC
OPEN INCIDENTS
INC-4821: lateral movement alert, under investigation. INC-4834: phishing campaign, contained, monitoring.
ACTIVE HUNTS
Hunt-19: anomalous outbound DNS on subnet 10.4.x, no match yet, query saved in the SIEM.
ESCALATION CONTEXT
None pending.
CUSTOMER IMPACT
Northwind ticketing was slow overnight, so auto-close lagged. Not a breach — noted for the morning call.
NEXT
Passes to Singapore at 00:00 UTC · reminder sent to the owner 30 minutes before shift end.

Everything else you get with it.

None of this is a tier, an add-on or a feature flag. It is in the product for every team, at every size, on day one.

Working-time policy

Keep every rotation inside working-time law without checking it by hand. Presets for the UK, EU, US and Australia, or set your own limits — and going outside them is a deliberate, recorded decision.

Tier coverage rules

Never staff a shift without the seniority a client was promised. Say how many of each tier a shift needs — two T2 and one T1 on nights — and the schedule holds you to it instead of leaving it in a runbook.

Public holidays

Nobody gets rostered on a day they were entitled to have off. Holidays arrive for every region you operate in, you can add your own, and your weekend is whatever your part of the world actually treats as one.

On-call

Primary and Backup on rotations you define, checked against the shift schedule so nobody is on call while on leave or straight off a night.

Follow-the-sun

Chain offices in hand-off order for a client. Gaps show before you save, and managers at both ends are told when a hand-off breaks.

Rotation groups

Give a team its own schedule without disturbing anyone else’s. A group that works to different hours stops being the reason your rotation needs an exception.

Fixed schedules

People who do not rotate still count. Pin anyone to a fixed shift and they stay on the roster with the reason shown, rather than disappearing out of your coverage picture.

Roles and permissions

Everyone sees only what their role should show them. The same person can run one client account and simply work shifts on another, which is how an MSSP actually operates.

Your own address

Your team signs in at an address that is yours alone, like acme.socrotate.com. Passwords are only ever typed on a dedicated sign-in page with no third-party scripts, and a session for your company never carries over to anyone else’s.

Audit trail

Answer “who changed this, and when” without anyone having to remember. Every change to the team, schedule, leave, swaps, handover and settings is recorded, searchable and exportable.

Notifications

People hear about the things that affect them without being chased. Leave, swaps and handover reminders reach them in the app, and by email or Slack if you want them there too.

Guided setup

You finish setup with a real schedule rather than an empty product. A guided run through your shifts, days off, coverage rules and policy ends by generating your first rotation.

Team management

Get the whole team in without adding them one at a time, and open anyone to see their upcoming shifts and leave in one place when you need to answer a question about them.

Data controls

Start part of it over without losing the rest. Clear your configuration, the generated schedule, the day-to-day workflow data or everything — and nothing goes until you type the name back.

Docs in the product

The answer is one click from the screen that raised the question. The guides live inside the dashboard, so nobody goes hunting through a help site mid-shift.

Running a rotation already?

See it on your own rotation, not a demo tenant.

Tell us how your SOC is structured — shifts, tiers, offices, who never rotates. We'll build the rotation, walk through where coverage and fairness land, and answer the questions a generalist scheduling tool can't.

  • RotationA month of 24/7 coverage in one action.
  • CoverageEvery gap flagged before it reaches a client.
  • FairnessEvery number on the ledger comes apart.