Product

Every feature here exists because an MSSP SOC needed it.

Rotations built to your pattern, or solved from your rules. Coverage you can prove to a client. A fairness ledger an analyst can take apart. Handover that survives the gap between shifts — and between offices. Every client’s coverage measured across every office that serves it.

01 · Automated scheduling

Stop rebuilding the rotation every month.

Build the rotation once and extend it for as long as you need. Describe a repeating pattern, or state the demand and the rules and let the solver work out who goes where.

  • Pattern mode: a repeating cycle each analyst follows, staggered across the crew and extended nightly.
  • Rule mode: each window solved against what every shift needs — tier, team lead, a named qualification — and your rules on rest, pairing, weekends and balance, kept topped up nightly.
  • Working-time law is the floor. A solved roster is checked against your rules before a shift is written, and anything it could not fill is listed with the rule that blocked it.
  • Approved leave is never written over, a shift you place by hand stays where you put it, and anyone who never rotates stays pinned in place.
Watch bands6-DAY CYCLE · 6 ANALYSTS
Bands
P1
Day
P2
Day
P3
Evening
P4
Evening
P5
Night
P6
Off
AnalystPatternOffsetToday
KPK. PatelT32-2-1-1+0Day
AOA. OkaforT22-2-1-1+1Day
MCM. ChenT22-2-1-1+2Evening
JLJ. LindqvistT22-2-1-1+3Evening
SRS. ReyesT12-2-1-1+4Night
RBR. BauerT12-2-1-1+5Off
generated through21 Aug 2026
roll-forwardnightly · 02:00 UTC
tier feasibility✓ T2 or above on every night
manual overrides preserved4
02 · AI Assistant

Ask it instead of hunting for it.

A chat panel sits over every dashboard page and answers who’s on call, whether next week has a gap, or how fairness landed this month — from your own rota, in plain language.

  • Sees schedules, rosters, leave, swaps, holidays, handover notes, fairness and coverage.
  • Read-only: it never assigns a shift, approves a request or changes a setting, and says so if you ask.
  • Runs through the same permission checks as the rest of the product; conversations stay inside your organisation and are saved privately.
  • Coming soonConfirming an action in the chat — approving a leave request or a swap — with the same checks a button click would run.
  • Coming soonTurning an existing schedule, uploaded as a spreadsheet, into a rotation pattern.
Assistant
Any open swap requests?
Two are waiting on you: R. Bauer for the Thu night shift, and a swap from T. Adeyemi for Mon 25 May — both pass the rest check.
Ask about your schedule…
03 · Leave and swaps

Approving stops being a calculation.

A request reaches a manager as a decision, not a puzzle: the shifts it empties, the coverage it costs, and the colleagues who could genuinely take them.

  • Half days, multi-day stretches and recurring absences, with the cover picked while you approve.
  • An allowance per leave type per year, granted up front or accrued monthly, counted in calendar or working days, with carry-over; every request shows what it uses and what it leaves, and approving over it records the overrun.
  • People who cannot cover are still listed, with the reason why.
  • Swaps go to a named colleague or an open board anyone free can claim, with the rest check already done.
  • A manager who lets one through against the rest rules leaves that on the record.
13 May 2026Evening16:00-00:001 still covering · min 2BELOW MIN
J. LindqvistT2 · off that day · 11h rest clear
ELIGIBLE
D. HassanT1 · off that day · 8h since night shift
rest window
M. ChenT2 · already on Evening
already working
1. PROPOSED
M. Chen
Night · Fri 15 May
2. PEER
S. Reyes
Accepted
3. MANAGER
You
Awaiting approval
Rest check✓ both parties
Coverage afterholds · 2/2
04 · Fairness ledger

End the argument about who always gets the weekends.

Every analyst sees their own position, the team average, and the arithmetic that produced both — so a disputed number can be taken apart instead of taken on trust.

  • Nights, evenings, weekends and holidays weigh what you decide; a weekend night on a public holiday counts as all three.
  • Every total comes apart into the shift, the weekend that fell on it and the holiday on top.
  • Rolling 30, 90 and 365-day views, so an imbalance that shows over a month but not a year is visible as a new one.
  • Anyone who does not rotate is listed with the reason rather than dropped from the average.
Fairness ledger90 DAYS · 6 IN ROTATION
Widest gap
42.2h
K. Patel carries the most
Average
168.0h
weighted, per analyst
Your position
−2.6h
level with the cohort
Where everyone sits
S. Reyes −21.2hK. Patel +21.0h
carrying lesslevelcarrying more
K. Patel · made up of189.0h
Shift weight156.0hWeekend uplift21.0hHoliday uplift12.0h
night · weight×1.50
weekend · holiday×1.25 · ×1.50
a night on a weekend8 × 1.50 × 1.25 = 15.0h
the same shift midweek12.0h
05 · MSSP clients and follow-the-sun

Find the hole in the chain before your client does.

A client handed between offices is covered for real, not on paper. Each office keeps its own clock and its own people, but the coverage they add up to is one picture.

  • Each office keeps its clients — the SLA promised, the offices covering them and the order they hand over in.
  • Gaps and overlaps in a chain are shown before you save it; a nightly sweep alerts the managers at both ends of a broken hand-off.
  • Schedules belong to offices, so handing a client on changes who serves it instead of leaving a second copy to keep in step.
  • When the client asks whether you met the SLA, the answer is a link they open without a login, showing your own coverage figures.
Northwind FinancialSLA 99% · 3 OFFICES
00040812162024
Singapore
UTC+8
0009
London
UTC+1
0817
Austin
UTC−5
1322
Chain
GAP
hand-off orderSingapore → London → Austin
overlap at hand-off60 min · 240 min
gap before Singapore picks up22:00–00:00 UTC · 120 min
managers alertedAustin · Singapore
06 · Handover

The incoming shift starts knowing what the last one knew.

Open incidents, live hunts and the thing that will page someone at 03:00 are written down before anyone clocks off, and waiting on screen when the next analyst logs in.

  • Built-in fields for incidents, hunts and escalations, or a form you design yourself.
  • You decide who owes each handover; a reminder reaches them half an hour before they finish.
  • Only the shift actually taking over can mark it read, and their name and the time stay on it.
  • Where a client moves between offices the note moves with it, and one trip around the chain is grouped so an office that passed nothing on is a visible blank.
Received fromLondon· Northwind Financialacknowledged 22:04 UTC

NightWed 13 May 2026

by R. Bauerowner for this slotupdated 05:51 UTC
OPEN INCIDENTS
INC-4821: lateral movement alert, under investigation. INC-4834: phishing campaign, contained, monitoring.
ACTIVE HUNTS
Hunt-19: anomalous outbound DNS on subnet 10.4.x, no match yet, query saved in the SIEM.
ESCALATION CONTEXT
None pending.
CUSTOMER IMPACT
Northwind ticketing was slow overnight, so auto-close lagged. Not a breach — noted for the morning call.
NEXT
Passes to Singapore at 00:00 UTC · reminder sent to the owner 30 minutes before shift end.

Everything else you get with it.

None of this is a tier, an add-on or a feature flag. It is in the product for every team, at every size, on day one.

Working-time policy

Keep every rotation inside working-time law without checking it by hand. Presets for the UK, EU, US and Australia, or set your own limits — and going outside them is a deliberate, recorded decision.

Tier coverage rules

Never staff a shift without the seniority a client was promised. Say how many of each tier a shift needs — two T2 and one T1 on nights — and the schedule holds you to it instead of leaving it in a runbook.

Public holidays

Nobody gets rostered on a day they were entitled to have off. Holidays arrive for every region you operate in, you can add your own, and your weekend is whatever your part of the world actually treats as one.

On-call

On-call that cannot contradict the shift schedule underneath it, because it is planned alongside the rotation rather than in a separate tool somebody forgets to update.

Rotation groups

Give a team its own schedule without disturbing anyone else’s. A group that works to different hours stops being the reason your rotation needs an exception.

Fixed schedules

People who do not rotate still count. Pin anyone to a fixed shift and they stay on the roster with the reason shown, rather than disappearing out of your coverage picture.

Roles and permissions

Everyone sees only what their role should show them. The same person can run one client account and simply work shifts on another, which is how an MSSP actually operates.

Audit trail

Answer “who changed this, and when” without anyone having to remember. Every change to the team, schedule, leave, swaps, handover and settings is recorded, searchable and exportable.

Notifications

People hear about the things that affect them without being chased. Leave, swaps and handover reminders reach them in the app, and by email or Slack if you want them there too.

Guided setup

You finish setup with a real schedule rather than an empty product. A guided run through your shifts, days off, coverage rules and policy ends by generating your first rotation.

Team management

Get the whole team in without adding them one at a time, and open anyone to see their upcoming shifts and leave in one place when you need to answer a question about them.

Data controls

Start part of it over without losing the rest. Clear your configuration, the generated schedule, the day-to-day workflow data or everything — and nothing goes until you type the name back.

Docs in the product

The answer is one click from the screen that raised the question. The guides live inside the dashboard, so nobody goes hunting through a help site mid-shift.

Running a rotation already?

See it on your own rotation, not a demo tenant.

Tell us how your SOC is structured — shifts, tiers, offices, who never rotates. We'll build the rotation, walk through where coverage and fairness land, and answer the questions a generalist scheduling tool can't.

  • RotationA month of 24/7 coverage in one action.
  • CoverageEvery gap flagged before it reaches a client.
  • FairnessEvery number on the ledger comes apart.