SOC Dashboard
- See the number of alerts needing action, remaining SLA, and MTTD/MTTR/MTTC on one screen
- Visualizes risk distribution and detection-method breakdown in charts
- A high-risk alert ranking shows at a glance what to prioritize
For SOC (Security Operations Center) teams
Find attacks fast, and respond at once.
TF-CADS is an AI-powered attack detection and defense system: AI detects and analyzes cyberattacks, and supports everything from triage and first response to reporting on one screen.
- 9AI models
- 8role-based permissions
- 8languages supported
Real-time attack maps
Attack origins are estimated with GeoIP, so you can see attack trends worldwide and in Japan on a map. Views are at the country and region level; individuals are not identified.
🌐 Global Attack Map● Realtime
🎌 Domestic Attack Map (Japan)● Realtime
See TF-CADS in action
These are the actual admin screens. From detection to triage, case management, and reporting, the whole SOC workflow runs in a single system.
Alerts
- A unified alert list automatically sorted by risk score
- Filter by threat type, detection method, status, and remaining SLA
- Reuse daily triage conditions with saved filters
Triage
- AI combines scenario matching, ML classification, and baseline deviation into a single evaluation
- The "AI rationale" column shows the reasoning and supporting event IDs
- Create a case and assign an owner with one click
Case management
- Groups related alerts and manages them as a single incident
- Track assignee, remaining SLA, and response status in a list
- Keeps a response record at closure for later review
Reports
- Generate daily, monthly, or quarterly scheduled reports with one click
- Automatically aggregates KPIs (MTTD/MTTR/MTTC/FP rate) and threat statistics
- Distribute and download as CSV, Markdown, or print-ready PDF
URL Monitoring
- Automatically monitors registered URLs for availability and tampering (status code, content hash)
- Cross-references internal logs to detect brute-force attempts and access from known-malicious IPs
- Sends an immediate email notification when an anomaly is detected
Run your SOC on one screen
AI-driven detection and analysis
- Detection combines rules, machine learning, anomaly detection and UEBA
- Domain checks and cross-referencing with threat intelligence
- Attack chains visualized as scenarios
From triage to first response
- Alerts prioritized by severity and SLA
- Case management and approval-based defense actions
- Records every step from detection to response
Operations visibility and reporting
- A dashboard shows detection trends, SLA status and risk distribution at a glance
- Operational reports for any period
- AI model evaluation and drift monitoring (MLOps)
How it works
- DetectLogs are ingested, and AI and rules detect signs of attack.
- TriagePriorities are set by severity and SLA, and alerts are routed to the right person.
- Respond & defendDefense actions run after approval, and outcomes are confirmed through effectiveness checks.
- ReportsResponse records and trends are compiled and exported for management and audit.
One screen, end to end
From checking alerts to creating cases, running defense actions and reporting, all without switching screens.
Built to be trusted
Encryption of personal data
Names, contact details and multi-factor authentication secrets are encrypted at the application layer before storage.
Multi-factor authentication and permissions
One-time codes from an authenticator app, and fine-grained permission control by role.
Audit Log
Records who changed what and when, so every change can be traced later.
Contact
Please use the form below for product questions, demo requests, deployment inquiries, and more. Our team will reply to the email address you provide.