Issue #2 of the iSOCaaS newsletter covers the first quarter of 2026. It was a decisive quarter in which the platform’s two-tier architecture moved from specification to operational reality. Sixteen months into the project, the consortium has completed seven deliverables, two of them in Q1.
The first is D2.3, the Core SOC Enablers. It brings together OBRELA’s Swordfish platform and SPHYNX’s SPA Suite, which together form the Baseline SOC Services Tier. These platforms provide SIEM, SOAR, vulnerability management, cyber threat intelligence and preparedness and training modules. The deliverable also sets up the information-sharing and incident-reporting mechanisms in line with NIS2.
The second is D3.1, the first version of the five AI-based intelligent enablers. These make up the Intelligent SOC Services Tier:
- LLM-powered cyber threat intelligence discovery with STIX 2.1 output.
- User and entity behaviour analytics based on AutoML.
- Adversarial ML monitoring with a human in the loop.
- AI-assisted threat hunting.
- CACAO-based response recommendation.
The issue also reviews progress across all work packages and looks ahead to Q2: the final version of the AI modules (D3.2), end-to-end integration in WP4, and the start of Service Delivery with a pilot programme targeting 62 users.
Co-funded by the European Union under the Digital Europe Programme, Grant Agreement No. 101190388. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Cybersecurity Competence Centre (ECCC). Neither the European Union nor the granting authority can be held responsible for them.