CyberRemdy

"I couldn't afford SOC training so I built my own SOC platform"

I wanted to learn Security Operations Centre work practically. TryHackMe, paid courses, commercial SIEM tools — all cost money I didn't have.So I did what made sense to me. I built my own.

CyberRemedy started as a personal learning project. No fancy background just someone who wanted to understand how SOC analysts actually work — log analysis, threat detection, incident response — without paying for expensive platforms.What ended up surprising me was how far it grew.

What CyberRemedy does

CyberRemedy is a free, self-hosted SOC platform that runs on a single machine. No cloud subscription, no licence fees, no data leaving your network.

It includes real-time network traffic monitoring, ML anomaly detection using Isolation Forest and Random Forest models, MITRE ATT&CK mapping, SOAR playbooks for automated response, honeypots, YARA and Sigma rule engines, and case management.

The one thing that matters most

Live traffic capture. Many free SIEMs are log-based only — they analyse what already happened. CyberRemedy monitors traffic in real time, which changes what you can actually detect and how fast.

Who it's for

Anyone learning SOC work without a budget. Home lab users. Small teams who need enterprise-grade tooling without enterprise costs.

GitHub: https://github.com/moon0deva/CyberRemedy

Feedback welcome — especially from people who install it and hit problems.