About SOCRoot
SOCRoot is Mu'ath Yousef's independent cybersecurity product initiative. It is developing automatable subscription services for smaller organizations and validating whether each service produces measurable value customers will pay to receive repeatedly. Project Synapse remains a separate open-source graduation project.
Cybersecurity graduate from Tafila Technical University, focused on SOC engineering, security automation, architecture, and operational evidence.
The public repositories show both implemented work and its limits. They deliberately avoid presenting planned modules, synthetic demonstrations, or incomplete integrations as customer outcomes or production guarantees.
Focus
Detection, case handling, evidence capture, and operator-centered incident workflows.
Dry-run-first orchestration with human approval, audit records, and rollback requirements.
Clear boundaries between SOCRoot product work, reusable technical assets, and the separate Project Synapse graduation project.
AI-assisted analysis that records uncertainty and avoids sending raw client data to external providers.
Evolution
An open-source graduation project combining cybersecurity workflows, data analytics, and a scalable modular architecture.
An independent product initiative focused on automatable cybersecurity subscription services with measurable, repeatable customer value.
The current focus is selecting narrow service problems, validating willingness to pay, and proving safe delivery with explicit evidence gates.
Principles
A capability is described as verified only when tests, deployment evidence, limitations, and rollback behavior can be reviewed.
High-impact remediation is never presented as unattended automation. Dry-run and explicit approval are the default.
Raw client data is not published, reused as portfolio material, or sent to external AI providers without explicit authorization.
Pre-production status, incomplete integrations, assumptions, and safety constraints belong in the public engineering record.
Repository map
A useful engagement begins with authorization, a narrow customer problem, measurable outcomes, and evidence requirements—not a promise of unattended production capability.