SIEM & SOC Calculators
30 free siem & soc calculators in Cyber Security.
- Alert False Positive Rate CalculatorCompute false-positive rate, false discovery rate and precision from triage outcomes, then price the wasted analyst time.
- Alert Fatigue CalculatorQuantify analyst alert fatigue from queue depth, false-positive rate and shift utilisation, and estimate alerts left untouched.
- Alert Volume CalculatorProject daily SOC alert volume from event rate and rule fire rate, after deduplication, suppression and correlation.
- Analyst Capacity CalculatorWork out how many alerts one analyst and one shift can genuinely handle from shift hours, utilisation and handling time.
- Breach Cost CalculatorEstimate data breach cost per record with lifecycle and control adjustments, following the published cost-of-a-breach structure.
- Case Load CalculatorCompare incoming SOC case volume with investigative capacity, and see how fast the backlog grows or clears.
- Chain of Custody CalculatorScore the completeness of an evidence custody record — documentation, signatures, hash verification and unexplained gaps.
- Detection Rule Coverage CalculatorScore how much of your detection content is actually enabled, fed with telemetry, tuned and tested — not just written.
- Evidence Integrity CalculatorTime a SHA-256 verification pass over an evidence set and check the hash algorithm still offers real collision resistance.
- Forensic Storage CalculatorSize evidence storage for disk images, memory captures and triage packages, with working copies and retention costs.
- Incident Cost CalculatorTotal the cost of one security incident: response labour, downtime, third-party support, remediation and overtime.
- Incident Response Time CalculatorModel time-to-respond from paging, acknowledgement and escalation hops, and test it against your severity SLA.
- IOA Detection CalculatorEstimate the chance of catching an attack chain from behavioural detections, using per-step probability across the chain.
- IOC Match Rate CalculatorMeasure how much of your threat-intel indicator set ever fires, how precise the matches are, and how much feed decay costs.
- MITRE ATT&CK Coverage CalculatorMeasure ATT&CK Enterprise coverage across tactics, techniques and sub-techniques, weighted by detection confidence.
- MTTD CalculatorBreak mean time to detect into dwell, telemetry lag, rule interval, queue delay and analyst confirmation, and find the bottleneck.
- Playbook Efficiency CalculatorCompare manual and automated playbook execution, allowing for failures that fall back to manual, and find the break-even run count.
- Security MTTR CalculatorCompute security mean time to respond across detect, triage, contain, eradicate and recover phases, with automation savings.
- SIEM EPS CalculatorConvert events per day into average, peak and licensable EPS, with headroom and a twelve-month growth projection.
- SIEM Log Ingestion CalculatorTurn an EPS figure and a source mix into GB per day, wire bandwidth and annual raw volume using real average event sizes.
- SIEM Log Retention CalculatorWork out how many days of logs a given storage budget actually buys, and whether it clears your compliance retention floor.
- SIEM Storage Requirement CalculatorSize hot, warm and cold SIEM tiers from EPS, event size and retention, then price the whole estate per month.
- Sigma Rule Coverage CalculatorTrack a Sigma rule set from applicable to converted to deployed, and find where field mapping loses your detections.
- SOAR Automation Coverage CalculatorMeasure how much of the triage workflow SOAR really automates, the hours it returns and the payback on the platform.
- SOC Health Score CalculatorRoll MTTD, MTTR, false-positive rate, ATT&CK coverage, staffing and automation into one weighted SOC health score.
- SOC Maturity CalculatorScore SOC maturity across business alignment, people, process, technology and services on a five-level capability scale.
- SOC Staffing CalculatorSize a SOC rota in FTE, including the 4.2–5 FTE per seat that genuine 24×7 coverage requires once shrinkage is funded.
- Threat Hunting Coverage CalculatorScore a hunting programme on hypothesis execution, technique and data-source coverage, and conversion of findings into detections.
- True Positive Rate CalculatorDerive recall, precision, F1, specificity and balanced accuracy from a detection confusion matrix.
- YARA Rule Coverage CalculatorAssess YARA coverage across malware families and check whether your scan throughput can keep up with daily file volume.