# PocketSOC: EDR Security Alerts — On-call incident response

> On-call incident response (iPhone/iPad app by WeaveHub Technologies LLC.)

- Source: https://appshunter.io/ios/app/pocketsoc-edr-security-alerts/id6757983606 (this page in markdown: same URL + `.md`)
- Developer: [WeaveHub Technologies LLC](https://appshunter.io/developer/1857837562)
- Category: Business, Productivity
- Price: Free with in-app purchases
- Age rating: 4+
- Requires: iOS 18.6 · 21 MB
- Languages: American English
- Released: 2026-03-05
- Data updated: 2026-08-18
- User reviews in markdown: https://appshunter.io/ios/app/pocketsoc-edr-security-alerts/id6757983606/reviews.md

## What is PocketSOC?

Your on-call phone buzzes at 2 AM: a critical detection from your EDR. With PocketSOC you triage it, review the process tree, and contain the compromised host - without opening your laptop.

PocketSOC is a mobile SOC for on-call security analysts, security engineers, and MSP operators. It brings detections from CrowdStrike, Microsoft Defender for Endpoint, Microsoft Defender for Cloud, and AWS GuardDuty into one native view.

CONNECT YOUR OWN TENANT IN ABOUT 2 MINUTES
Personal Use mode talks directly to your own vendor APIs. Enter your API credentials and PocketSOC starts pulling detections immediately - no backend onboarding, no sales call.

FREE - UNLIMITED VIEWING
- Unified detections list across connected vendors
- Full detection detail: host, user, process, severity, MITRE ATT&CK mapping
- Process graphs and correlation timelines across related detections
- Connect your first security vendor at no cost

PRO - ACT FROM YOUR PHONE
- Contain a compromised host with one tap
- Cross-vendor containment actions
- Close, assign, and set disposition on alerts
- Push notifications for new critical detections
- Connect a second (or more) security vendor

YOUR CREDENTIALS STAY ON YOUR DEVICE
In Personal Use mode your vendor API credentials never pass through a WeaveHub server. They are stored encrypted on-device and used only to call the vendor's own API, directly from your phone. Biometric app lock included. No advertising ID collection.

ORGANIZATION MODE
Teams can connect to their organization's PocketSOC deployment for shared visibility, centralized management, and Splunk integration. Organization accounts are provisioned by your admin.

SUBSCRIPTION DETAILS
PocketSOC Pro is $9.99/month or $99.99/year, each with a 7-day free trial. Payment is charged to your Apple Account at confirmation of purchase. The subscription renews automatically unless cancelled at least 24 hours before the end of the current period. Manage or cancel anytime in your Apple Account settings. Viewing detections remains free without a subscription.

Terms of Service and Privacy Policy: https://www.pocketsoc.com/terms and https://www.pocketsoc.com/privacy

CrowdStrike, Microsoft Defender, and AWS GuardDuty are trademarks of their respective owners. PocketSOC is an independent product and is not affiliated with or endorsed by these vendors.

## Pricing and in-app purchases

Base price: Free.

**Subscriptions**

| Subscription | Price | Period |
| --- | --- | --- |
| Personal Monthly | $9.99 | per month |
| Personal Annual | $99.99 | per year |



## Version history (last 5 releases)

### 1.9.0 — 2026-08-13

This one is all about the first ten minutes with the app.

Connecting your own CrowdStrike, Defender, or GuardDuty tenant is much less painful now. PocketSOC checks your credentials before it saves anything, and when something is off it tells you what. Picked the wrong CrowdStrike region? It works out the right one and offers to switch. Missing an API scope? It names the scope you need. The connect screen also walks you through creating a read-only API client, which is all you need to start viewing detections.

Trying the demo? There is now a way out of it. A Connect your tenant button takes you straight into setup, and the sample data disappears the moment your real tenant is connected.

You can also preview what a critical alert looks like on your lock screen before connecting anything, so you know exactly how a 2 AM page would reach you.

The header bars throughout the app were rebuilt so they stay solid navy and readable on iOS 26 instead of turning translucent.

Fixes in this release:
Sample data no longer shows up when you are signed in to an organization that has no vendor profiles assigned to you yet. You get a clear message instead.
Leftover demo profiles from an earlier session are now cleaned up on their own.
The Profiles screen has its back button again.
New app icon and animated launch screen.

Thanks for testing. If something looks wrong, tell me and it will get fixed.

### 1.8.0 — 2026-08-04

Bug fixes

### 1.7.1 — 2026-07-19

• Personal Use is now free to explore — connect your own CrowdStrike, Defender, or GuardDuty account and view detections, correlation, and process graphs at no cost.
• Upgrading to Pro is now only required to take action (close, assign, update disposition, or contain).
• Fixed an issue where attempting a Pro-only action without a subscription didn't clearly prompt you to upgrade.
• Under-the-hood reliability improvements.

### 1.6.1 — 2026-04-18

PocketSOC 1.6.0 introduces Personal Use mode — a new way to monitor your own security environments directly from your phone, without a portal or organization setup.

NEW: Personal Use Mode
Connect your own vendor API keys (CrowdStrike, Microsoft Defender, Defender for Cloud, AWS GuardDuty) directly inside the app.

• No portal required  
• No team admin required  
• Credentials stay in the iOS Keychain  
• No PocketSOC server ever receives Personal Use credentials  
• Optional iCloud Keychain sync across your Apple devices  

Perfect for consultants, researchers, home labs, and small-team operators who want a lightweight mobile pane of glass.

Trial & Subscription
• 7-day free trial (no credit card required)  
• $4.99/month or $49.99/year via the App Store  
• Cancel anytime from inside the app or iOS Settings  

Real detections only - no sample data and no feature gating.

Mode Selection Improvements
Choose your workflow on first launch:

• My Organization (existing portal flow)  
• Personal Use (new local-only mode)  
• Try Demo (no credentials required)

Switch modes anytime from Settings. Switching securely clears local credentials and cached detection data.

New WeaveHub Brand System
PocketSOC now ships with an updated navy-and-gold visual system:

• Improved light and dark mode surface hierarchy  
• Updated typography across the entire app  
• Cleaner severity presentation and detection lists  
• Consistent visual identity across all screens  

Improved Launch Experience
A new branded launch animation provides a smooth transition from app icon to interface with no visual flash between system launch and app content.

Subscription Management Improvements
Manage your subscription directly from inside Settings:

• View renewal status  
• Cancel or reactivate plans  
• Switch between monthly and annual options  
• Clear status messaging synced with App Store subscription state  

Security & Reliability Improvements
• Rebuilt credential storage layer for improved iCloud Keychain compatibility  
• Fixed repeated Face ID prompts during detection refresh in some configurations  
• Added migration logic to clean up legacy keychain access settings  
• Additional stability and performance improvements across detection views and profile management  

Coming Next
• Additional dashboard polish updates

### 1.5.2 — 2026-03-16

What's New
  - Alert correlation - related detections are now automatically grouped together
  - Attack chain detection - identity compromise followed by endpoint activity highlighted with a visual timeline
  - Correlation timeline - tap "View timeline" on any correlated alert to see the full sequence
  - Configurable correlation window - choose how far back to look for related alerts (15 min to 24 hours)
  - Comprehensive accessibility improvements - VoiceOver, Dynamic Type, Reduced Motion, improved contrast
  - Fixed a layout shift when navigating back from detection details
  - General stability and performance improvements

## Apps similar to PocketSOC

| App | Rating | Price | Category |
| --- | --- | --- | --- |
| [Proofpoint Events](https://appshunter.io/ios/app/proofpoint-events/id1492192231) | — | Free | Business |
| [Events by Check Point](https://appshunter.io/ios/app/events-by-check-point/id6773616769) | — | Free | Business |
| [victor Go](https://appshunter.io/ios/app/victor-go/id1078603200) | 3.0 (1) | Free | Business |
| [Health-ISAC Summit](https://appshunter.io/ios/app/health-isac-summit/id6447704468) | 4.0 (1) | Free | Business |
| [Portnox AgentP](https://appshunter.io/ios/app/portnox-agentp/id861819015) | 3.0 (8) | Free | Business |

## More apps by WeaveHub Technologies LLC

- [Scott's Guide](https://appshunter.io/ios/app/scotts-guide/id6756032740)
- [PocketSync - All-in-One Sync](https://appshunter.io/ios/app/pocketsync-all-in-one-sync/id6757086699)
- [PocketNOC - Network Monitoring](https://appshunter.io/ios/app/pocketnoc-network-monitoring/id6759849253)
- [WeaveLedger](https://appshunter.io/ios/app/weaveledger/id6760322757)
- [PocketIntel](https://appshunter.io/ios/app/pocketintel/id6760926150)

All apps by WeaveHub Technologies LLC: https://appshunter.io/developer/1857837562

## Related topics

[crowdstrike](https://appshunter.io/ios/topics/crowdstrike)

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-08-18.*
