SIEM & SOC Calculators

30 free siem & soc calculators in Cyber Security.

Alert False Positive Rate CalculatorCompute false-positive rate, false discovery rate and precision from triage outcomes, then price the wasted analyst time.
Alert Fatigue CalculatorQuantify analyst alert fatigue from queue depth, false-positive rate and shift utilisation, and estimate alerts left untouched.
Alert Volume CalculatorProject daily SOC alert volume from event rate and rule fire rate, after deduplication, suppression and correlation.
Analyst Capacity CalculatorWork out how many alerts one analyst and one shift can genuinely handle from shift hours, utilisation and handling time.
Breach Cost CalculatorEstimate data breach cost per record with lifecycle and control adjustments, following the published cost-of-a-breach structure.
Case Load CalculatorCompare incoming SOC case volume with investigative capacity, and see how fast the backlog grows or clears.
Chain of Custody CalculatorScore the completeness of an evidence custody record — documentation, signatures, hash verification and unexplained gaps.
Detection Rule Coverage CalculatorScore how much of your detection content is actually enabled, fed with telemetry, tuned and tested — not just written.
Evidence Integrity CalculatorTime a SHA-256 verification pass over an evidence set and check the hash algorithm still offers real collision resistance.
Forensic Storage CalculatorSize evidence storage for disk images, memory captures and triage packages, with working copies and retention costs.
Incident Cost CalculatorTotal the cost of one security incident: response labour, downtime, third-party support, remediation and overtime.
Incident Response Time CalculatorModel time-to-respond from paging, acknowledgement and escalation hops, and test it against your severity SLA.
IOA Detection CalculatorEstimate the chance of catching an attack chain from behavioural detections, using per-step probability across the chain.
IOC Match Rate CalculatorMeasure how much of your threat-intel indicator set ever fires, how precise the matches are, and how much feed decay costs.
MITRE ATT&CK Coverage CalculatorMeasure ATT&CK Enterprise coverage across tactics, techniques and sub-techniques, weighted by detection confidence.
MTTD CalculatorBreak mean time to detect into dwell, telemetry lag, rule interval, queue delay and analyst confirmation, and find the bottleneck.
Playbook Efficiency CalculatorCompare manual and automated playbook execution, allowing for failures that fall back to manual, and find the break-even run count.
Security MTTR CalculatorCompute security mean time to respond across detect, triage, contain, eradicate and recover phases, with automation savings.
SIEM EPS CalculatorConvert events per day into average, peak and licensable EPS, with headroom and a twelve-month growth projection.
SIEM Log Ingestion CalculatorTurn an EPS figure and a source mix into GB per day, wire bandwidth and annual raw volume using real average event sizes.
SIEM Log Retention CalculatorWork out how many days of logs a given storage budget actually buys, and whether it clears your compliance retention floor.
SIEM Storage Requirement CalculatorSize hot, warm and cold SIEM tiers from EPS, event size and retention, then price the whole estate per month.
Sigma Rule Coverage CalculatorTrack a Sigma rule set from applicable to converted to deployed, and find where field mapping loses your detections.
SOAR Automation Coverage CalculatorMeasure how much of the triage workflow SOAR really automates, the hours it returns and the payback on the platform.
SOC Health Score CalculatorRoll MTTD, MTTR, false-positive rate, ATT&CK coverage, staffing and automation into one weighted SOC health score.
SOC Maturity CalculatorScore SOC maturity across business alignment, people, process, technology and services on a five-level capability scale.
SOC Staffing CalculatorSize a SOC rota in FTE, including the 4.2–5 FTE per seat that genuine 24×7 coverage requires once shrinkage is funded.
Threat Hunting Coverage CalculatorScore a hunting programme on hypothesis execution, technique and data-source coverage, and conversion of findings into detections.
True Positive Rate CalculatorDerive recall, precision, F1, specificity and balanced accuracy from a detection confusion matrix.
YARA Rule Coverage CalculatorAssess YARA coverage across malware families and check whether your scan throughput can keep up with daily file volume.