Automate. Orchestrate. Measure.

IncMan SOAR is the pioneering Security Orchestration, Automation & Response platform to automate, orchestrate and measure CSIRTs and SOCs.



DFLabs IncMan Security Orchestration, Automation and Response platform enables you to automate, orchestrate and measure security operations and incident response processes and tasks.


Supervised Active Intelligence TM driven by Machine Learning

DFLabs R3 Rapid Response Runbooks fully automate the triage, investigation and containment of incidents using conditional actions and 99+ included automation actions that allow workflows to execute a variety of data enrichment, notification, containment and custom actions based on complex,  stateful and logical decision making.

Our patent-pending Automated Responder Knowledge (ARK) module applies machine learning to historical responses to threats, and recommends relevant playbooks and paths of action to manage and mitigate them.


Cyber Incidents under Control TM

DFLabs IncMan drives intelligence-driven command and control of your security operations. Orchestrate the full incident response and investigation life cycle for your SOC and CSIRT. Empower security analysts, forensic investigators and incident responders to respond to, track, predict and visualise cyber security incidents. Enable security managers and CISO’s to manage and measure operational performance and cyber risk.


Full Incident Phase Management

Measure, benchmark and optimise Security Operations and Incident Response activities and performance with 140+ KPI’s and reports. Role-based dashboards and customizable widgets produce real-time situational awareness of the state of your security operations and risk exposure. Measure every individual phase of the IR workflow. Visualise and analyse threats.

DFLabs Research Resources

Insights, Best Practices, and News






Schedule a live demo with one of our cybersecurity specialists