Security ConsoleConceptWatchpost
Alerts, incidents, vulnerabilities and compliance in one security console.
A security operations console: posture score, AI-assisted alert triage, incident playbooks with approvals, ranked vulnerabilities and ISO 27001 tracking.
- Category
- Cybersecurity · Security Operations
- Designed for
- Web
Why Watchpost exists
The problem
Small security teams drown in alerts from a dozen tools and struggle to prove control coverage to auditors and customers.
The product
Watchpost correlates alerts, triages them with AI, runs approval-gated playbooks for incidents and ranks vulnerabilities by real risk.
Built for: Security and IT teams at mid-sized companies, and the MSSPs that support them.
- Security posture score across tools
- AI alert triage with logged decisions
- Incident timelines and approval-gated playbooks
- Vulnerabilities ranked by real-world risk
- ISO 27001 control coverage tracking
- Integrations with identity, EDR, cloud and email
Walkthrough
Signal Over Noise
Designed for an analyst's morning: what is real, what is urgent, what needs a decision.
- 01
Security Overview
Posture score, critical alerts and vulnerabilities, MFA coverage and control status.
- 02
Alert Queue
AI triage verdicts, auto-closed noise and escalations with owners.
- 03
Incident Timeline
Correlated events, an AI summary and a playbook with approval steps.
- 04
Vulnerabilities
Fix-first list based on known exploitation and internet exposure.
Every screen
The full experience.
What makes it different
Automation With A Human Gate
AI closes benign noise with every decision logged; containment actions such as disabling accounts always wait for an analyst.
Alert Triage
Correlated, prioritised and explained.
Incidents
Timelines, summaries and playbooks.
Vulnerabilities
Ranked by exploitability and exposure.
Compliance
ISO 27001 control coverage.
How it’s built
The technology stack.
The architecture we would build this on today, and why each piece earns its place.
- Web app
Next.js, React, TypeScript, Tailwind CSS
Review queues and dashboards that stay fast with thousands of items
- AI services
Python (FastAPI) · Claude via the Anthropic API with tool use
Strong reasoning and structured tool calls, isolated from the core API
- Tools & integrations
Model Context Protocol (MCP) servers
One standard way for agents to reach business systems, with scoped permissions
- Durable workflows
Temporal
Long-running, multi-step AI work that survives restarts and waits for approvals
- Knowledge & memory
PostgreSQL + pgvector
Retrieval over approved sources without a separate vector database
- Event pipeline
Kafka · ClickHouse
Millions of security events searched in seconds
- Integrations
Identity, EDR, cloud and email connectors
Signals from the tools teams already run
- Evaluation & tracing
Versioned eval suites, OpenTelemetry traces, cost tracking
Every prompt or model change is tested before release and every run is explainable
More inside
One Console For Security.
Detection, response and governance in the same place.
Identity
Risky sign-ins, MFA gaps and stale service keys.
Controls & Audits
Evidence and status for each ISO 27001 control.
What comes next
On the roadmap.
What a second release would add once the first one is in real users’ hands.
- 01SOC 2 control mapping
- 02Phishing simulation
- 03Attack-surface discovery
- 04On-call rota and paging
- 05Customer security questionnaires
Concept project
Need Something Like This?
This is concept work: the product design, screens and architecture we would start from. If your business needs security operations or compliance software, we can scope a first release with you, usually within a week.
Next project
Ladle
Food delivery from local kitchens: ordering, live tracking and partner tools.
