# SOC Defenders

> Probe-verified (tier 2 of 3). Last checked 2026-08-23. 4 of 5 capability checks passed.

- host: docs.socdefenders.ai
- url: https://docs.socdefenders.ai/
- category: threat intelligence platform
- type: documentation
- language: en

## Probe-verified · tier 2 of 3

Probed live on 2026-08-23 against rubric v1. 4 of 5 checks passed.

- PASS — Markdown negotiation
- PASS — Markdown twin at a predictable URL
- PASS — llms.txt
- fail — API catalog
- PASS — MCP server answers

MCP tools (from tools/list on 2026-08-23, served from socdefenders.main-kill-isr.mintlify.me): search_soc_defenders, query_docs_filesystem_soc_defenders, submit_feedback

## Unverified actions

Read from the page's own content, with the wording each was drawn from. Inference is kept separate from tested facts; an agent completing the action is tier 3.

- **register** — "Sign up at socdefenders.ai — the Free tier requires no credit card" → `https://socdefenders.ai`
- **query_api** — "Make your first API call in minutes. Get an API key and pull live threat data." → `https://socdefenders.ai/api/v1/iocs`

## Summary

SOC Defenders provides aggregated cybersecurity news, IOCs, and CVE data via REST and TAXII APIs for SOC analysts and security teams.

## Context

3 sites in this index share the category "threat intelligence platform"; 3 are transactional.

## How we grade

- tier 1 — **Declared**: The site says agents are welcome in its robots.txt. A permission, not a capability.
- tier 2 — **Probe-verified** (this site): We fetched the site and tested each signal ourselves. Dated, repeatable, re-checked on a schedule.
- tier 3 — **Behaviourally verified**: An agent completed the action end to end — booked, bought, submitted — and it worked.

## About this record

Known-Good probes sites live and publishes what was tested and when.
Method: https://knowngood.sh/about.md · Rubric: https://knowngood.sh/benchmark