NCS SOAR

NCS SOAR is an orchestration, automation, and comprehensive incident response platform developed by the Vietnam National Cyber Security Corporation (NCS). The system is designed to optimize incident handling processes, standardize cross-unit collaboration workflows, reduce mean time to respond (MTTR), and enhance the effectiveness of incident response coordination across the entire organization.

Request Demo Datasheet

NCS SOAR is an orchestration, automation, and comprehensive incident response platform developed by the Vietnam National Cyber Security Corporation (NCS). The system is designed to optimize incident handling processes, standardize cross-unit collaboration workflows, reduce mean time to respond (MTTR), and enhance the effectiveness of incident response coordination across the entire organization.

HOW DOES NCS SOAR BENEFIT ORGANIZATIONS

Incident Management
  • Initiate, categorize, assign severity levels, SLA, status, and response plans.
  • Manage detailed incident information: technical data, attachments, indicators of compromise, victims, and response history.
  • Create and track tasks related to incidents with unique identifiers, handling units, task status, and priority levels.
  • Support advanced search with multiple criteria.
  • Build, search, and manage incident response workflows by version.
  • Support reassigning handlers during the response process.
  • Manage users, permission groups, departments, and service units with clear hierarchical structures.
  • Support editing, tracking action history, and configuring role-based permissions.
  • API intake of incidents from other systems.
  • Connect with internal BPM, ThreatConnect, and Telegram to coordinate information and actions.
  • Report on incidents, tasks, SLA, response teams by time, status, and performance.
  • Export PDF reports with charts and data tables.
  • Responsive interface, optimized for devices from 1280px upwards.
  • Light/dark theme and Vietnamese/English language options.
Alert incidents and SLA breaches via email, push notifications, and in-system alerts.

WHY DO ORGANIZATIONS AND BUSINESSES

USE NCS SOAR?

Multi-dimensional integration Multi-dimensional integration

Supports integration with BPM systems, Threat Intelligence platforms (ThreatConnect), Telegram groups, and incident intake via external APIs.

Enables building, modifying, and tracking incident response processes and tasks, aligned with organizational policies and capabilities.

Manages SLAs and configures real-time overdue alerts, providing periodic reports for performance evaluation.

Provides real-time dashboards on incidents, tasks, and response teams; supports task assignment, status tracking, and activity history.