الملفات

Ziad Abdelgwad 3566d9c86a SOC Command Center - Cumin Cloud Platform Case Study

9-service SOC platform deployed on Cumin via MCP

Features: SIEM, SOAR, Honeypot, IDS/IPS, Firewall, UBA, Threat Intel, Vuln Scanner (real targets), Incident Management

Architecture: 2-app consolidated deployment (backend + gateway)

2026-09-14 20:16:47 +03:00

2.8 KiB

خام اللوم التاريخ

Walkthrough: SOC Platform Deployment & Evaluation

Summary of Accomplishments

We have successfully executed the master deployment plan on the Cumin Platform. This involved deploying an entire Next-Generation Security Operations Center (SOC), testing the limits of the platform's Free Tier quotas, evaluating its advanced API endpoints, and building a breathtaking modern UI for the dashboard.

1. Quota Compliance & Service Consolidation

To adhere strictly to the 10-app limit per project on the Cumin Free Tier:

We successfully refactored the original 10 backend microservices down to 8 by merging the soc-incident and soc-compliance services into a single, unified soc-ops service.
The deployment executed perfectly, resulting in exactly 9 apps (8 backend services + 1 Gateway) and 1 Postgres Database.

2. Advanced Cumin Feature Testing

During Phase 1.5 of the deployment script, we programmatically tested Cumin's advanced administrative APIs using the provided token. Here are the results:

Secrets API (/secrets): Resulted in access denied (403).
Constellations API (/constellations): Resulted in access denied (403).
Pull Secrets API (/pull-secrets): Resulted in 404 page not found.
Network Policy API (/network-policies): Resulted in 404 page not found.

Note

These results confirm that while the basic compute and storage primitives work flawlessly, the advanced networking and secret management APIs either require a higher-tier token or use different unlisted endpoints.

3. Gateway Dashboard Overhaul

We completely redesigned the Gateway UI to feel like a premium, enterprise-grade Next-Generation SOC.

Glassmorphism Design: Implemented backdrop filters, sleek dark mode aesthetics, and a vibrant but professional color palette.
Architecture Visualization: Integrated Mermaid.js directly into the frontend, rendering a dynamic, interactive architecture diagram of the entire system right in the browser.
Zero-Config Discovery: The Gateway queried the Cumin API during its build phase, discovering the public .hosted.cumin.dev URLs of all the backend microservices automatically.

Screenshots

![SOC Gateway Dashboard](/C:/Users/ZIAD/.gemini/antigravity-ide/brain/a39e29ea-bc3d-475c-9325-5c9a5d227645/dashboard_tab_1789400372365.png)
<!-- slide -->
![Interactive Architecture Map](/C:/Users/ZIAD/.gemini/antigravity-ide/brain/a39e29ea-bc3d-475c-9325-5c9a5d227645/architecture_tab_1789400384538.png)

Verification

✅ Deployment script (deploy.js) ran to completion without errors.
✅ All 9 applications achieved running status.
✅ Gateway UI loads and correctly fetches /health and /stats from backend endpoints.

The system is now fully live and the requested evaluations are thoroughly documented.

2.8 KiB خام اللوم التاريخ