A Chrome extension from Dropzone AI
COACH mentors SOC analysts through real alerts
Open an alert in your SIEM or EDR and click Generate Guidance. COACH summarizes what fired, lays out a benign and a malicious explanation, and suggests what to check next. No cost to install. Available from the Chrome Web Store, and it works in Chromium browsers such as Microsoft Edge.

A Chrome extension from Dropzone AI
COACH mentors SOC analysts through real alerts
Open an alert in your SIEM or EDR and click Generate Guidance. COACH summarizes what fired, lays out a benign and a malicious explanation, and suggests what to check next. No cost to install. Available from the Chrome Web Store, and it works in Chromium browsers such as Microsoft Edge.

A Chrome extension from Dropzone AI
COACH mentors SOC analysts through real alerts
Open an alert in your SIEM or EDR and click Generate Guidance. COACH summarizes what fired, lays out a benign and a malicious explanation, and suggests what to check next. No cost to install. Available from the Chrome Web Store, and it works in Chromium browsers such as Microsoft Edge.

A Chrome extension from Dropzone AI
COACH mentors SOC analysts through real alerts
Open an alert in your SIEM or EDR and click Generate Guidance. COACH summarizes what fired, lays out a benign and a malicious explanation, and suggests what to check next. No cost to install. Available from the Chrome Web Store, and it works in Chromium browsers such as Microsoft Edge.

New analysts see fewer alerts end to end
Tier 1 alert work, the first review of each alert, used to be where analysts learned the job. As AI agents take on more of it, new analysts see fewer alerts from start to finish, and senior analysts have little time to mentor.
Dropzone AI builds some of those agents, so we built COACH to help close the gap.
New analysts see fewer alerts end to end
Tier 1 alert work, the first review of each alert, used to be where analysts learned the job. As AI agents take on more of it, new analysts see fewer alerts from start to finish, and senior analysts have little time to mentor.
Dropzone AI builds some of those agents, so we built COACH to help close the gap.
New analysts see fewer alerts end to end
Tier 1 alert work, the first review of each alert, used to be where analysts learned the job. As AI agents take on more of it, new analysts see fewer alerts from start to finish, and senior analysts have little time to mentor.
Dropzone AI builds some of those agents, so we built COACH to help close the gap.
New analysts see fewer alerts end to end
Tier 1 alert work, the first review of each alert, used to be where analysts learned the job. As AI agents take on more of it, new analysts see fewer alerts from start to finish, and senior analysts have little time to mentor.
Dropzone AI builds some of those agents, so we built COACH to help close the gap.
What COACH gives you
what fired
A summary of the alert type and what the detection is trying to catch.
Two possible explanations
A summary of the alert type and what the detection is trying to catch.
What to check next
Specific investigation steps for testing each explanation.
Further reading
Articles from the web on the topics behind the alert, if you want to go deeper.
What COACH gives you
what fired
A summary of the alert type and what the detection is trying to catch.
Two possible explanations
A summary of the alert type and what the detection is trying to catch.
What to check next
Specific investigation steps for testing each explanation.
Further reading
Articles from the web on the topics behind the alert, if you want to go deeper.
What COACH gives you
what fired
A summary of the alert type and what the detection is trying to catch.
Two possible explanations
A summary of the alert type and what the detection is trying to catch.
What to check next
Specific investigation steps for testing each explanation.
Further reading
Articles from the web on the topics behind the alert, if you want to go deeper.
What COACH gives you
what fired
A summary of the alert type and what the detection is trying to catch.
Two possible explanations
A summary of the alert type and what the detection is trying to catch.
What to check next
Specific investigation steps for testing each explanation.
Further reading
Articles from the web on the topics behind the alert, if you want to go deeper.
How COACH works
Open the alert
Go to the alert in the security tool you already use, such as your SIEM or EDR.
Click generate guidance
COACH analyzes the page you have open and builds guidance for that alert.
Work through the guidance
Read the summary and the two possible explanations. Then follow the investigation steps, and check the guidance against your own procedures.
How COACH works
Open the alert
Go to the alert in the security tool you already use, such as your SIEM or EDR.
Click generate guidance
COACH analyzes the page you have open and builds guidance for that alert.
Work through the guidance
Read the summary and the two possible explanations. Then follow the investigation steps, and check the guidance against your own procedures.
How COACH works
Open the alert
Go to the alert in the security tool you already use, such as your SIEM or EDR.
Click generate guidance
COACH analyzes the page you have open and builds guidance for that alert.
Work through the guidance
Read the summary and the two possible explanations. Then follow the investigation steps, and check the guidance against your own procedures.
Who COACH is for
For analysts
Learn on the real alerts in front of you. Get guidance at any hour, on any shift. Get ideas on an alert type you have not seen before.
For SOC leads
Give new hires a structured way to start each alert. Supplement senior analysts' mentoring with practice on real alerts. See how Dropzone AI approaches alert investigation.
Who COACH is for
For analysts
Learn on the real alerts in front of you. Get guidance at any hour, on any shift. Get ideas on an alert type you have not seen before.
For SOC leads
Give new hires a structured way to start each alert. Supplement senior analysts' mentoring with practice on real alerts. See how Dropzone AI approaches alert investigation.
Who COACH is for
For analysts
Learn on the real alerts in front of you. Get guidance at any hour, on any shift. Get ideas on an alert type you have not seen before.
For SOC leads
Give new hires a structured way to start each alert. Supplement senior analysts' mentoring with practice on real alerts. See how Dropzone AI approaches alert investigation.
Who COACH is for
For analysts
Learn on the real alerts in front of you. Get guidance at any hour, on any shift. Get ideas on an alert type you have not seen before.
For SOC leads
Give new hires a structured way to start each alert. Supplement senior analysts' mentoring with practice on real alerts. See how Dropzone AI approaches alert investigation.
What happens to your alert data?
When you click Generate Guidance, COACH sends the page content to Dropzone AI and to an AI model provider such as OpenAI to produce the guidance. Per the COACH privacy notice, neither trains on nor retains that content, and the extension does not retain the alert or the guidance. Dropzone AI does collect the alert type, time, IP address and geolocation. Share the notice with your security team before you install.
What happens to your alert data?
When you click Generate Guidance, COACH sends the page content to Dropzone AI and to an AI model provider such as OpenAI to produce the guidance. Per the COACH privacy notice, neither trains on nor retains that content, and the extension does not retain the alert or the guidance. Dropzone AI does collect the alert type, time, IP address and geolocation. Share the notice with your security team before you install.
What happens to your alert data?
When you click Generate Guidance, COACH sends the page content to Dropzone AI and to an AI model provider such as OpenAI to produce the guidance. Per the COACH privacy notice, neither trains on nor retains that content, and the extension does not retain the alert or the guidance. Dropzone AI does collect the alert type, time, IP address and geolocation. Share the notice with your security team before you install.
What happens to your alert data?
When you click Generate Guidance, COACH sends the page content to Dropzone AI and to an AI model provider such as OpenAI to produce the guidance. Per the COACH privacy notice, neither trains on nor retains that content, and the extension does not retain the alert or the guidance. Dropzone AI does collect the alert type, time, IP address and geolocation. Share the notice with your security team before you install.
Where it works
COACH works on the alert page open in your browser tab, in the console your team already uses. Examples: AWS GuardDuty, CrowdStrike EDR Alert types: Endpoint, cloud, identity, network, phishing
Where it works
COACH works on the alert page open in your browser tab, in the console your team already uses. Examples: AWS GuardDuty, CrowdStrike EDR Alert types: Endpoint, cloud, identity, network, phishing
Where it works
COACH works on the alert page open in your browser tab, in the console your team already uses. Examples: AWS GuardDuty, CrowdStrike EDR Alert types: Endpoint, cloud, identity, network, phishing
Where it works
COACH works on the alert page open in your browser tab, in the console your team already uses. Examples: AWS GuardDuty, CrowdStrike EDR Alert types: Endpoint, cloud, identity, network, phishing
Frequently Asked Questions
[
01
]
What is COACH?
[
02
]
Does COACH cost anything?
[
03
]
What happens to my alert data?
[
04
]
Which browsers and consoles does it work with?
[
05
]
Can COACH be wrong?
[
06
]
How is COACH related to the Dropzone AI platform?
Frequently Asked Questions
[
01
]
What is COACH?
[
02
]
Does COACH cost anything?
[
03
]
What happens to my alert data?
[
04
]
Which browsers and consoles does it work with?
[
05
]
Can COACH be wrong?
[
06
]
How is COACH related to the Dropzone AI platform?
Frequently Asked Questions
[
01
]
What is COACH?
[
02
]
Does COACH cost anything?
[
03
]
What happens to my alert data?
[
04
]
Which browsers and consoles does it work with?
[
05
]
Can COACH be wrong?
[
06
]
How is COACH related to the Dropzone AI platform?
Frequently Asked Questions
[
01
]
What is COACH?
[
02
]
Does COACH cost anything?
[
03
]
What happens to my alert data?
[
04
]
Which browsers and consoles does it work with?
[
05
]
Can COACH be wrong?
[
06
]
How is COACH related to the Dropzone AI platform?

Start with the next alert you open
No cost to install. Available from the Chrome Web Store.

Start with the next alert you open
No cost to install. Available from the Chrome Web Store.

Start with the next alert you open
No cost to install. Available from the Chrome Web Store.

Start with the next alert you open
No cost to install. Available from the Chrome Web Store.