CyberLegion Citadel

SecOps Platform solution on CyberLegion — SecOps Platform

CyberLegion Citadel is the SecOps Platform solution for CyberLegion.

Start with Citadel

Use your tenant account to open it, sign in, or request access. API calls use the same governed execution endpoint as the console.

Sign up->Sign in->Open the console->Solutions on the website->Support->

API endpoint

POST https://api.dev.cyberlegion.io/execute
Authorization: Bearer <YOUR_TENANT_API_TOKEN>
Content-Type: application/json

{
  "app": "<app id from this solution>",
  "input": {}
}

Apps In This Solution

CyberLegion Citadel groups 25 apps. Each app is a packaged capability your team uses through the console, in chat, or from the public API. Availability follows your tenant plan, roles, and permissions.

App	Area	What it does
Case Management	—	Case Management is an app in the Citadel solution on CyberLegion.
Deception & Honeypots	—	Deception & Honeypots is an app in the Citadel solution on CyberLegion.
DetectIQ	—	DetectIQ is an app in the Citadel solution on CyberLegion.
Digital Forensics	—	Digital Forensics is an app in the Citadel solution on CyberLegion.
Digital Forensics & Incident Response	—	Digital Forensics & Incident Response is an app in the Citadel solution on CyberLegion.
Extended Detection & Response	—	Extended Detection & Response is an app in the Citadel solution on CyberLegion.
IncidentIQ	—	IncidentIQ is an app in the Citadel solution on CyberLegion.
Malware Analysis	—	Malware Analysis is an app in the Citadel solution on CyberLegion.
Mobile Threat Defense	—	Mobile Threat Defense is an app in the Citadel solution on CyberLegion.
Network Detection & Response	—	Network Detection & Response is an app in the Citadel solution on CyberLegion.
Playbooks	—	Playbooks is an app in the Citadel solution on CyberLegion.
PreventionIQ	—	PreventionIQ is an app in the Citadel solution on CyberLegion.
Response Center	—	Response Center is an app in the Citadel solution on CyberLegion.
RuntimeGuard	—	RuntimeGuard is an app in the Citadel solution on CyberLegion.
Security Automation	—	Security Automation is an app in the Citadel solution on CyberLegion.
Security Data Pipeline	—	Security Data Pipeline is an app in the Citadel solution on CyberLegion.
Security Telemetry	—	Security Telemetry is an app in the Citadel solution on CyberLegion.
SIEM	—	SIEM is an app in the Citadel solution on CyberLegion.
SOAR	—	SOAR is an app in the Citadel solution on CyberLegion.
SOAR & Automation	—	SOAR & Automation is an app in the Citadel solution on CyberLegion.
SOC	—	SOC is an app in the Citadel solution on CyberLegion.
Threat Graph	—	Threat Graph is an app in the Citadel solution on CyberLegion.
Threat Hunting	—	Threat Hunting is an app in the Citadel solution on CyberLegion.
Threat Intelligence	—	Threat Intelligence is an app in the Citadel solution on CyberLegion.
User & Entity Behavior Analytics	—	User & Entity Behavior Analytics is an app in the Citadel solution on CyberLegion.

How To Use It

Channel	Best for
Chat	Ask for what you need in the CyberLegion console; the app plans, executes, and streams results back into your workspace history.
Console	Open any app in this solution from the console, with your tenant's data, roles, and permissions applied.
API	Automate an app from your own systems through the governed execution endpoint shown in the action panel above, using your tenant API token.

Every request is authenticated, authorized, and audited inside your tenant.

Tenant Safety

• Public docs never show tenant records, identifiers, private URLs, credentials, or configuration.
• Apps render only the data your tenant returns; empty states stay empty.
• Keep API tokens in your own vault or runtime environment. Never paste them into docs, tickets, or support requests.

Need help?

Use the Support action above, or browse the app catalog.

Previous solutionCyberLegion CipheraAll solutionsNext solutionCyberLegion CivicGuard