SOC Staffing Calculator

Methodology: total daily triage workload (alerts × triage minutes) divided by productive hours per shift (assumes ~80% productive time, allowing for breaks/escalation overhead), divided across shifts for your coverage model, plus standard backup factor (1.4×) for leave, attrition and training time. Excludes L2/L3, SOC Manager, and threat-hunting roles — this estimates triage capacity only.