For Security & GSOC teams

Situational awareness for security teams

A GSOC doesn't need another screen — it needs a cleaner signal. CityAlert normalizes 689 official feeds on six continents into one stream: earthquakes and tsunamis, disasters and civil-defense alerts, wildfires, severe weather, unrest and incident-level reports where agencies publish them. Watch the world on one map, geofence the places your people and facilities are, and let webhooks or an AI agent do the polling.

feeds polled
689
focus regions
757
live map
free

What you get

  • Global hazard coverage

    GDACS, NASA EONET, NOAA tsunami, aviation SIGMETs, civil-defense feeds, wildfire services, weather agencies across five continents — the baseline layer a duty desk watches, unified and mapped.

  • Geofenced webhooks for assets

    Register an HTTPS endpoint per facility, route or executive itinerary — category, severity and bbox filters, push delivery each tick. The cluster mode fires only on escalation inside your geo-fence.

  • MCP server for agentic monitoring

    The Model Context Protocol endpoint exposes incidents, regions, trends and history as tools — point Claude, ChatGPT or your own agent at it and ask 'what's within 50km of our Singapore office' instead of scripting queries.

  • Shareable operating pictures

    Build a dashboard per theater, asset class or event — boundary, categories, panels — and share the link. Analysts and stakeholders see the same live view without accounts.

  • Historical context for threat assessment

    The archive and trends endpoints answer 'how normal is this' — incident density, year-over-year movement and event history for the places you assess.

What it won't do

We'd rather lose a deal than oversell the data — these are the honest limits for security & gsoc teams.

  • Open data, not threat intelligence

    CityAlert aggregates official public feeds — it doesn't monitor social media, dark web or proprietary intel sources, and makes no guarantee about completeness for security-critical decisions.

  • No SLA on the free tier

    Feed cadence is ~10–15 minutes and uptime is best-effort outside contractual plans. For duty-desk dependence, talk to us about volume and availability commitments.

  • Not for life-safety dispatch

    It's an awareness layer — for emergencies affecting people, your protocols and official channels stay authoritative.

Is it a fit?

Built for you if…

  • GSOCs that want a free or low-cost global hazard baseline alongside their intel stack.
  • Travel-risk and executive-protection teams monitoring itineraries across regions.
  • Corporate security teams geofencing facilities, campuses and supply routes.
  • Analysts building agentic monitoring — MCP tools make incident status queryable by AI assistants out of the box.

Probably not if…

  • You need guaranteed-complete threat coverage or social-media monitoring — pair this with a dedicated intel platform.
  • Your requirements include contractual uptime for life-safety alerting on the free tier.

Free baseline; Pro for push delivery

The map, dashboards and real-time API are free — evaluate it as a duty-desk layer at no cost. Geofenced webhook delivery, real-time data and the historical MCP tools live on the paid API tiers (from $99/mo); talk to us for enterprise volume or availability requirements.

Full plan details on the pricing page; questions and enterprise scope: [email protected].

Frequently asked questions

Can our AI assistant query incidents directly?

Yes — POST /api/mcp speaks the Model Context Protocol. Add it as a connector in Claude or ChatGPT (or call it from your own agent) and tools like get_incidents, get_trends and list_regions work against live data. Free tools need no key; historical tools take a paid-plan key.

How do geofenced alerts work for facilities?

Register a webhook per asset with a bbox, category and severity filters. Newly-seen matching incidents are POSTed each tick; a cluster_threshold option upgrades delivery to a single escalation post when N incidents land inside the fence within an hour.

Is this a replacement for our threat-intel platform?

No — it's an official-feed awareness layer. The value is breadth, normalization and price: a defensible global baseline for free or low cost, alongside whatever intel tooling you already run.

CityAlert.live is an aggregation and awareness tool — media-sourced incidents are approximate and every pin names its source. For emergencies always follow official channels. See our terms and sources & licenses.