Service Catalog

Engineered for national scale.

Every capability in the DarkCoders CISO platform, organized by sovereign pillar.

❖ Customer Operations (291)

Z.108

Persona Llm

Z.108 persona-agent LLM decision layer

Z.108

Persona Worker

Z.91 persona-bound agent runtime

OPA Decision Log Shipper

Z.119

Approval Expiry Worker

Approval expiry sweeper

Z.119

Posture History Collector

Posture history time-series collector

Z.120

Approval Escalator

Approval queue auto-escalation

Z.120

Heartbeat Monitor

Heartbeat-loss detection

DSPM-lite PII scanner

Board-report PDF/HTML generator

Z.124

Memory Distiller

Persona memory distillation

Z.128

Llm Fleet Runner

LLM full-fleet summarization runner

Z.130

Approval Auto Resolver

Approval auto-resolver

Z.130

Board Telegram Digest

Daily Telegram digest with key board metrics

Z.131

Exec Briefing

Weekly Monday executive briefing

Z.131

Resolver Alarm

Auto-resolver health alarm

Coverage bootstrap via bulk OPA evaluation

Z.133

Board Deck Monthly

Monthly board deck (multi-section PDF)

Distribute the monthly board deck via Brevo HTTP API

Z.134

Persona Evolve Weekly Review

Persona-Evolve Weekly Review

Z.134

Z134A Grafana Dashboard

Create / update Grafana dashboard 'ciso-composite-journal'

Z.135

Detection Response Loop

Detection -> Response orchestrator

SOC weekly metrics digest (Sun 08:00 UTC)

Z.136

Z136A Grafana Detection Loop

Grafana dashboard 'ciso-detection-loop'

Sbom Vuln Webhook Bridge

Vuln -> Webhook Bridge

Z.137

Z137D Grafana Sbom Vuln

Grafana dashboard 'ciso-sbom-vuln'

Z.138

Sbom Vuln Approval Submitter

Playbook approval submitter

Z.138

Sbom Vuln Playbook Generator

SBOM Vuln -> Playbook generator

Z.138

Usn Feed Fetcher

Ubuntu Security Notices (USN) feed fetcher

Per-CVE Ubuntu enrichment

Z.139

Z139D Grafana Playbooks

Grafana dashboard 'ciso-vuln-playbooks'

Z.140

Playbook Auto Skip

Auto-skip already-patched playbooks

Z140D Grafana Playbooks Patch

Patch the Z.139

Z.141

Opa Test Generator

OPA regression test generator

Z141D Grafana Opa Tests

Grafana dashboard 'ciso-opa-tests'

Z.142

Do Droplet Metadata Collector

DigitalOcean droplet metadata collector

Z.142

Inactive Droplet Detector

Inactive droplet detector

Z.142

Z142D Grafana Asset Graph

Grafana dashboard 'ciso-asset-graph'

Z.143

Ab Shadow Dispatcher

A/B shadow dispatcher

Z.143

Shadow Persona Creator

Shadow persona creator

Z.143

Z143D Grafana Ab

Grafana dashboard 'ciso-ab-test'

Z.144

Bayesian Uplift Scorer

Bayesian uplift scorer

Z.144

Chain Feedback Collector

Chain feedback collector

Z.144

Z144D Grafana Ml

Grafana dashboard 'ciso-ml-uplift'

Z.145

Detection Loop Ml Adapter

Detection loop ML adapter

Z.145

Z145D Grafana Ml Impact

Grafana dashboard 'ciso-ml-impact'

Z.146

Operator Brief

Operator daily brief generator

Z.146

Operator Brief Sender

Operator brief Telegram sender

Z.146

Z146D Grafana Brief

Grafana dashboard 'ciso-operator-brief'

Z.147

Config Drift Collector

Config snapshot collector

Z.147

Drift Analyzer

Config drift analyzer

Z.147

Z147D Grafana Drift

Grafana dashboard 'ciso-config-drift'

Z.149

Os Index Backup

OpenSearch index JSON backup to MinIO

Z.149

Vault Secret Backup

Vault secret backup (envelope-encrypted)

Z.149

Z149D Grafana Backups

Grafana dashboard 'ciso-backups'

Z.150

Ledger Anomaly Detector

Ledger anomaly detector

Z.150

Ledger Verify Runner

Ledger integrity verify runner

Z.150

Z150D Grafana Ledger

Grafana dashboard 'ciso-ledger-verify'

Saved threat hunt seeder

Z.151

Z151D Grafana Hunt

Grafana dashboard 'ciso-hunt'

Sla Metrics Collector

SLA / MTTR metrics collector

Z.152

Z152D Grafana Sla

Grafana dashboard 'ciso-sla-metrics'

Grafana dashboard 'ciso-cost'

Z.154

Heal Escalation Alerter

Heal escalation alerter

Z.154

Self Healing Supervisor

Self-healing service supervisor

Z.154

Z154D Grafana Heal

Grafana dashboard 'ciso-self-heal'

Grafana dashboard 'ciso-ti-score'

Z156D Grafana Latency

Grafana dashboard 'ciso-engine-latency'

Z.157

Attack Surface Scanner

External attack surface scanner

Z.157

Tls Expiry Checker

TLS certificate expiry checker

Z.157

Z157D Grafana Attack Surface

Grafana dashboard 'ciso-attack-surface'

Z.158

Key Rotation Tracker

Vault key rotation tracker

Grafana dashboard 'ciso-key-rotation'

Z.159

Os Ism Pressure Checker

ISM (Index State Management) pressure checker

Z.159

Os Storage Collector

OpenSearch storage collector

Z.159

Z159D Grafana Storage

Grafana dashboard 'ciso-os-storage'

Z.160

Mttd Anomaly Detector

MTTD anomaly detector

Z.160

Mttd Collector

MTTD (mean-time-to-detect) collector

Z.160

Z160D Grafana Mttd

Grafana dashboard 'ciso-mttd'

Grafana dashboard 'ciso-dns-health'

Z.162

Audit Anomaly Detector

Audit anomaly detector

Grafana dashboard 'ciso-audit-log'

Z.163

Minio Growth Tracker

MinIO bucket growth tracker

Z.163

Minio Policy Auditor

MinIO bucket policy auditor

Z.163

Z163D Grafana Minio

Grafana dashboard 'ciso-minio'

Z.164

Persona Queue Anomaly Detector

Persona queue anomaly detector

Z.164

Persona Queue Collector

Persona queue collector

Z.164

Z164D Grafana Persona Queue

Grafana dashboard 'ciso-persona-queue'

Z.166

Geoip Country Aggregator

Daily country-level aggregator

Z.166

Geoip Enricher

GeoIP attack enricher

Z.167

Email Auth Anomaly

Email auth anomaly detector

Z.167

Email Auth Checker

Email auth (SPF / DKIM / DMARC) health checker

Z.168

Tls Renewal Executor

TLS auto-renewal executor

Z.168

Tls Renewal Planner

TLS auto-renewal planner

Z.169

Notifier Fanout

Critical-event fan-out worker

Z.170

Approval Overflow Analyzer

Approval SLA overflow analyzer

Z.170

Approval Overflow Recommender

Approval SLA overflow recommender

Z.171

Disk Pressure Alerter

Disk pressure alerter & log-growth anomaly detector

Z.171

Disk Pressure Collector

Disk pressure + log file growth collector

Z.172

Sbom Diff Classifier

SBOM diff anomaly classifier

Fluentbit Fleet Installer

Fluent Bit fleet installer / health checker

Z.173

Ssh Auditor

SSH reachability auditor for CISO project fleet

Vault Upgrade Planner

Vault upgrade migration planner

Z.176

Dmarc Imap Poller

DMARC IMAP poller daemon

Z.176

Mail Dmarc Provisioner

Provision dmarc.reporting@darkcoders.io on ciso-mail

Dmarc Persona Tool Grant

Vault persona tool grants

Z.178

Nice Dmarc Dispatcher

NICE persona DMARC dispatcher

Z.179

Dmarc Dfir Case Builder

DMARC DFIR case builder

Z.179

Dmarc Sigma Generator

DMARC Sigma rule generator

Z.180

Dmarc Content Builder

DMARC content builder

Chrome Webstore Publisher

Chrome Web Store API publisher

Z.181

Dmarc Ir Autoresponder

DMARC IR auto-responder

Z.181

Droplet Cleanup Z181D

Automated old-droplet cleanup after 24h debug window

Z.181

Droplet Self Recover

Self-driven DO droplet recovery via snapshot + recreate

Z.181

Operator Blocked Auto Resolver

Operator-blocked auto-resolver

Z.182

Operator Action Aggregator

Operator action aggregator

Z.182

Operator Action Telegram Digest

Daily operator action Telegram digest

Z.188

Ad Forest Monitor

AD forest (corp.darkcoders.com) health monitor

Z.190

Keycloak Realms Provisioner

Provision 4 Keycloak realms (internal, customers, labs, partners)

Z.191

Keycloak Ldaps Federation

Provision Keycloak User Federation provider for AD LDAPS

Z.192

Keycloak Customer Hardener

Customer realm hardening

Z.193

Keycloak Composite Roles

60+ composite role bundles across all 4 realms

Z.194

Ad Tier Paw Bg

AD Tier-0/1/2 + PAW + break-glass accounts

Z.195

Jml Orchestrator

JML (Joiner / Mover / Leaver) automation

Z.196

Access Review Quarterly

Quarterly access review workflow + attestation tracker

Z.197

Identity Hardener

AD + Keycloak defensive hardening

Z.198

K8S Airgap Bundler

K8s manifest bundles + air-gapped deployment

Z.199

Tenant Provisioner

Customer tenant provisioner

Z.200

Customer Portal

Customer portal bootstrap

Tenant data scoping + audit + billing

Z.205

Soc Dashboard

Customer SOC dashboard data engine

Z.206

Ioc Engine

IOC ingestion + matching engine + TAXII/MISP import

Z.207

Soar Runbooks

SOAR runbook library + executor

Z.208

Alert Engine

Customer alert engine

Z.210

Dspm Engine

DSPM (Data Security Posture Management)

Z.211

Cspm Engine

CSPM (Cloud Security Posture Management)

Z.212

Vuln Mgmt

Vulnerability Management

Onboarding Orchestrator

Customer onboarding automation

Z.217

Xdr Correlator

XDR (Extended Detection & Response) correlation engine

Z.219

Ma Diligence

M&A (Mergers & Acquisitions) Due Diligence

Z.220

Customer Success

Customer success engine

Z.221

Nps Engine

NPS (Net Promoter Score) collection

vCISO (Virtual CISO) services

Z.229

Ai Prioritizer

AI-driven prioritization

Z.231

Integrations Marketplace

Integrations marketplace

Z.232

Ti Marketplace

Threat intel marketplace

Z.234

Regional Support

Regional support (follow-the-sun)

FedRAMP compliance pack

Z.238

Embedded Analytics

Embedded analytics with signed iframe URLs

Z.239

Govcloud

GovCloud region with FIPS + ITAR/EAR + egress controls

Z.240

Marketplace Ratings

Marketplace ratings + reviews + abuse reports

FedRAMP CICD evidence collector

Z.243

Poam Sla

POAM SLA monitor + breach alerts

Z.244

Soc2 Type2

SOC 2 Type II continuous monitoring + auditor report

Z.246

Audit Immutability

Audit log immutability (hash-chain WORM)

Z.247

Support Ticketing

Customer support ticketing

Z.248

Cost Metering

Cost center metering + chargeback

Z.249

Gdpr Dsr

GDPR DSR (Data Subject Request) handler

Z.250

Multi Region

Multi-region active-active topology

Z.251

Customer Secrets

Customer secrets vault

Z.252

Dlp Egress

DLP (Data Loss Prevention) + egress filter

Z.253

Insider Risk

Insider risk (UEBA-style)

Z.254

Pam Broker

Privileged Access Management (PAM) broker

Z.255

Dr Runbook

Disaster Recovery runbook orchestration

Z.256

Cross Account Broker

Cross-account roles broker

Data lineage with hash anchors

Z.260

Quantum Safe Crypto

Quantum-safe cryptography migration

Z.261

Sla Dashboards

Customer SLA dashboards

Z.262

Cyber Insurance

Cyber insurance underwriting

Z.263

Privacy Analytics

Privacy-preserving analytics gateway

Z.264

Supply Chain Attest

Supply chain attestation (SLSA + SBOM + signed in-toto)

Z.265

Zero Trust Microseg

Zero-trust microsegmentation

Z.266

Data Export Hub

Tenant data export hub

Z.268

Crypto Abuse Intel

Cryptocurrency abuse intelligence

Z.269

Carbon Accounting

Sustainable IT carbon accounting

Z.270

Sbom Vuln Score

SBOM vulnerability scoring

Z.271

Attack Surface

Attack surface management

Z.273

Code Signing

Code signing infrastructure

Z.274

Browser Isolation

Browser isolation gateway

Z.276

Hunt Marketplace

Threat-hunt queries marketplace

Z.277

Device Trust

ZeroTrust device-trust

Crypto-agile key rotation orchestrator

Z.280

Cwpp

Cloud Workload Protection Platform (CWPP)

Z.282

Iac Security Gate

IaC security gate (pre-apply)

Z.283

Service Mesh Sec

Service mesh security

Z.284

Customer Escrow

Customer key escrow + proof of decryption

Z.285

Soar Designer

SOAR playbook designer

Z.286

Itdr

Identity threat detection + response (ITDR)

Z.287

Ciem

Cloud Infrastructure Entitlement Management (CIEM)

Z.288

Network Telemetry

Network telemetry analytics

Z.289

Reg Mapping

Customer regulatory mapping cross-walk

Z.290

Cdr

Cloud Detection & Response (CDR)

Z.291

Dsar Portal

Customer-facing DSAR portal

Z.294

Cost Optimization

Customer cost optimization

Customer billing webhook + subscription lifecycle

Audit-trail blockchain anchor

Z.299

Identity Governance

Identity governance + certifications

Z.301

Slo Budget

Customer SLO + error budget tracker

Z.305

Health Score Predictor

Customer health-score predictor

Threat modeling automation (STRIDE)

Z.309

Reference Architecture

Customer reference architecture

Z.310

Sre Incident Review

SRE incident review (postmortems / RCA / action items)

Z.314

Multicloud Secrets Sync

Multi-cloud secrets sync

Z.315

Status Page Generator

Status page generator

Z.316

Api Rate Limiter

API rate limiter + quota engine

Email security: BEC + phishing detection

Z.321

Mdm Gateway

MDM gateway (mobile device management + posture)

Z.322

Backup Integrity Verifier

Backup integrity verifier

Z.323

Data Clean Room

Data clean room (DP-protected cross-tenant analytics)

Z.326

Chatops Bridge

ChatOps bridge (Slack / Teams / Discord / Telegram)

Z.327

Phishing Simulation

Phishing simulation campaigns

Z.328

Cloud Cost Forecast

Cloud cost forecasting + anomaly detection

Z.331

Api Spec Gate

API spec security gate (OpenAPI + GraphQL)

Z.332

Shadow It Discovery

Shadow IT / SaaS discovery + risk scoring

Z.333

Tabletop Exercise

Tabletop exercise platform

Z.334

Customer Success Ops

Customer success ops (renewal pipeline + expansion playbooks)

Z.336

Database Activity Monitor

Database activity monitor (DAM)

Z.339

Bot Management

Bot management (detection + classification + challenge)

Z.341

Cosign Attestation

Cosign + SLSA attestation registry

Z.342

Cyber Resilience Index

Cyber Resilience Index (CRI) composite metric

Z.344

Customer Kpi Dashboards

Customer KPI dashboards + thresholds

Z.345

Dark Web Monitor

Dark web monitor (cred leak + brand + paste-site)

Z.346

Customer Onboarding

Customer onboarding orchestrator

Z.349

Customer Billing Portal

Customer billing portal (invoices + entitlements + payment)

Z.350

Pii Discovery Classifier

PII / PHI / financial discovery + classification

Z.352

Notification Center

Customer notification center (multi-channel + user prefs)

Z.354

Customer Audit Export

Customer audit-log export (SIEM connectors)

Z.355

Customer Support Center

Customer support center (ticket queue + SLA + AI triage)

Z.357

Supply Chain Risk Monitor

Supply chain risk monitor (vendor breach feed + impact)

Z.358

Self Serve Secret Rotation

Self-serve secret rotation orchestrator

Z.359

Customer Asset Graph

Customer asset graph (assets + dependencies + blast radius)

Z.360

Persona Relay

Persona-to-persona relay (SMTP + Telegram)

Z.361

Bot Provisioner

Bot provisioner (Telegram bot ingestion + Vault registration)

Z.362

Service Catalog

Service catalog generator

Z.363

Mini App Shell

Mini App shell (Telegram WebApp initData validator + RBAC)

Z.364

Command Registry

Command registry (DarknessEye Master Plan §3)

Bulk Resolve Ear

(no description)

Ecarf-Gitlab-Provision

(no description)

Eramba-Auth-Provision

(no description)

Eramba-Backup-Provision

(no description)

Eramba-Rebuild

(no description)

Eramba-Webhook-Activate

(no description)

Gen-Role-Markdowns

generate 245 role markdown files

Godaddy-Publish

GoDaddy DNS autonomous publisher for darkcoders.io

🛡 Sovereign Identity (6)

Z.245

Saml Sso

SAML 2.0 / SSO federation

Z.258

Scim Provisioning

SCIM 2.0 user provisioning

Federated Identity Hub

Federated identity hub

Z.343

Sso Session Monitor

SSO session monitor (concurrent + idle + risk)

Z.356

Zero Trust Policy Engine

Zero-trust policy engine (subject + resource + context)

◊ AI & Simulation (8)

Z.116

Agent Telemetry Collector

Disaster recovery testing harness

Z.338

Ai Model Registry

AI model registry + lineage + governance

Agent-Loop

(no description)

Provision-Large-Agent

provision a single large-agent droplet on DigitalOcean

✦ Autonomous Defense (7)

Z.267

Threat Actors

Threat actor profiling (MITRE ATT&CK)

Z.303

Tracing Security

Distributed tracing security

Z.311

Threat Intel Sharing

Threat intel sharing (STIX/TAXII + trust circles)

Z.319

Appsec Gate

Application security gate (SAST/DAST orchestrator)

Z.337

Ueba Engine

UEBA engine (user + entity behavior analytics)

Z.340

Vulnerability Scan Orchestrator

Vulnerability scan orchestrator (customer service)

Z.347

Siem Correlation Library

SIEM correlation rule library (Sigma-style)

≡ GRC & Compliance (11)

Z.148

Compliance Baseline Seeder

Compliance baseline seeder

Z.148

Compliance Report Generator

Compliance report generator

Z.148

Z148D Grafana Compliance

Grafana dashboard 'ciso-compliance'

Z.209

Compliance Collector

Compliance evidence collector

Continuous Compliance

Continuous compliance

Z.300

Privacy Engineering

Privacy Engineering Framework

Z.312

Customer Attestation Portal

Customer attestation portal

Z.324

Vendor Risk Portal

Vendor risk portal (TPRM)

Z.329

Data Residency Enforcement

Data residency enforcement (per-tenant geo binding)

Z.348

Evidence Collector

Evidence collector (auto-pull + freshness + control linking)

⚙ Industrial Cyber Defense (9)

Z.272

Honeypot Networks

Honeypot / deception networks

Container Registry Sec

Container registry security + admission control

Z.293

Container Runtime Defense

Container runtime defense

Z.325

Iot Ot Inventory

IoT / OT inventory + posture

Z.330

Dns Firewall

DNS firewall + sinkholing (RPZ)

Z.335

K8S Admission Policy

K8s admission policy (OPA-style admission webhook)

Z.351

Ddos Mitigation

DDoS mitigation orchestrator

Z.353

Honeytoken Deployment

Honeytoken deployment + watchlist