ASOC PRODUCT TABLE
Choose by the problem you need to solve.
Compare what each product examines, what it produces, and what your team needs to validate before taking action.
01 / PRODUCT COMPARISON
What each product owns.
Compare product scope and outputs, then confirm the capabilities and permissions required for your installation.
| Product | Scope | Evidence basis | Primary outcome | Operating boundary |
|---|---|---|---|---|
| Secure | Infrastructure, assets, vulnerabilities, attack paths, twins, PQC inventory | Observed tenant-local evidence and imported provider context | Know what exists and what exposure is plausible | Current product surface; active work remains authorization-gated |
| Assure | Repositories, source evidence, findings, SBOM/CBOM, validation ladder | Immutable source snapshots, deterministic detectors, replay, challenge, human review | Make findings defensible and portable | Engineering candidate / review platform; not a release gate |
| SOAR | Investigation, claims, approvals, response rehearsal, local actuation boundaries | Typed evidence, tool provenance, twin/range evidence, approval records | Decide and respond with explicit authority | Internal/operator-gated surface; active response needs separate authority |
02 / CATEGORY COMPETITION
Where ASOC is different.
Category-level positioning only. This is not a vendor benchmark or performance claim.
| Market category | Typical center of gravity | ASOC positioning |
|---|---|---|
| Traditional ASM / VM | Find assets and prioritize known vulnerabilities | ASOC keeps discovery, provider coverage, attack paths, and remediation rehearsal tied to evidence and scope. |
| SAST / SCA / AppSec platforms | Find source and dependency issues | Assure emphasizes source-verifiable findings, replay, refutation, and human decision states instead of only scanner output. |
| SIEM / SOAR platforms | Correlate alerts and automate playbooks | SOAR centers evidence classes, authorization, rollback, and bounded execution before action. |
| GRC / compliance evidence tools | Collect control evidence and workflow approvals | ASOC treats control evidence as downstream of observed claims, source snapshots, and decision history. |
| PQC inventory tools | Catalog cryptographic exposure for migration | Quantum/PQC readiness is integrated with asset identity, source inventory, ownership, and migration prioritization. |