Agentic SOC &amp; investigations

AI-powered Alert Triage & EnrichmentAutonomous InvestigationsAutomated Remediation+1

7AI is the foundational AI security company.

Above Security

Insider Threat Detection

AI-native insider risk workflows for detecting, investigating, and preventing threats before they escalate.

AhnLab

EDR

Graphical attack flowchart visualization+5

AhnLab provides endpoint security products centered on Windows endpoint protection and centralized management.

AirMDR

EDR

AI virtual analyst for MDR triage+11

We're passionate about delivering awesome detection and response to security teams of all sizes.

AiStrike

AI-SPM

AI asset discovery and inventory+10

The AI-native security operations platform built for enterprise. Preemptive, autonomous, and continuously self-improving.

Andesite

We don't replace human talent and intelligence. We empower cybersecurity teams to make critical decisions, assess threats, respond immediately, reduce risk, and focus on prevention.

Anvilogic

Anvilogic is a threat detection and hunting platform that works alongside existing data platforms (Snowflake, Databricks, Splunk) rather than replacing them.

AquilaI

AI-Native Security Operations Center+4

Aquila I offers an AI-native cyber defense platform that centralizes security telemetry in a lakehouse architecture.

Arcanna.ai

Governed agentic investigation workflows+11

Arcanna.ai provides a Decision Intelligence AI platform for SOC and NOC environments, framing investigations as classification problems using hybrid models with convolutional layers and Long Short-Term Memory units.

Arch0

Arch0 is an AI-native security operations platform that uses a knowledge graph and autonomous agents to provide context-aware incident analysis and remediation.

AttackIQ

Pentest & Red Team

Automate adversary emulation tests+11

The leading platform for Adversarial Exposure Validation (AEV) We help security teams make better decisions by continuously measuring how adversaries can exploit gaps across people, processes, and technology.

Beacon Security

Security telemetry management+4

At Beacon, we're building the unified, intelligent data layer that empowers defenders to see more, move faster, and act with confidence in an AI-driven world.

Binalyze

Binalyze does not offer a staffed Managed Detection & Response (MDR) service; it provides the Binalyze AIR platform, an automated digital forensics and incident response (DFIR) tool used by enterprises and MSSPs to accelerate

BlinkOps

AI agents investigate incoming alerts+8

BlinkOps is an agentic security automation platform that utilizes AI-driven agents to handle end-to-end security operations tasks including alert triage, investigation, and incident containment.

Booli

Identity-centric log correlation+7

Booli is an identity-centric SIEM vendor that focuses on log ingestion, event correlation, and investigation context built around user identity.

Bricklayer AI

Agentic Security Operations+3

Bricklayer AI provides a governed and coordinated AI workforce for Security Operations Centers (SOCs).

Bugcrowd

Pentest & Red Team

Crowdsourced red team engagements+10

Bugcrowd provides penetration testing and red-team services through a managed crowdsourced platform that matches customers with vetted ethical hackers and curated tester teams.

Cantina

AI Runtime & Agent Security

Cantina is the world's first truly agentic security platform: autonomous AI agents that don't just detect threats, but understand, respond, and adapt in real time.

Caver

Caver is an AI-native security operations and investigation platform designed to automate and accelerate SOC workflows.

CipherData

Alert triage with evidence enrichment+7

Security operations shouldn't be limited by headcount. We build the AI agent that gives every SOC the capacity it was never able to hire.

Cogent Security

Autonomous vulnerability investigation+8

We work intensely and collaboratively to push boundaries in AI, security, and software so we can solve hard technical problems and protect our customers.

Cognna

Autonomous threat detection and triage+7

COGNNA is a leading agentic AI cybersecurity provider, empowering organizations to detect the undetectable and defeat unpredictable threats.

Command Zero

Autonomous alert triage+10

8 products

Command Zero is the autonomous and AI-assisted SOC platform built for complex enterprise environments.

Conifers

Conifers is a startup vendor focused on agentic SOC and investigations through its CognitiveSOC platform.

Corelight

NDR

Network detection and response analytics+4

We put evidence at the heart of security.

Cotool

AI co-pilot for investigationsNo-code security agent builder+5

Cotool is our vision of how security work should be: faster, simpler, and less exhausting.

CounterShadow

Autonomous AI analyst for SOC automation+4

We want to revolutionise Security Operations Centers through advanced AI automation.

Crogl

Queries security tools in native formats+7

AI for Enterprise Security

CyberProof

CyberProof is a cloud first security operations company, enabled through key cloud partners, to help deliver the most cutting edge security services to help protect your enterprise.

Cyber Triage

Cyber Triage allows you to quickly and efficiently investigate endpoints using automation and artifact scoring.

+10

CybrHawk

Natural-language SOC investigation+8

6 products

CybrHawk is a leading provider of cybersecurity solutions. Our offerings help organizations to get their cyber-defences attuned to stall, manage, mitigate and prevent breaches.

Cymulate

Threat Hunting

Simulate full attack kill chainsTest security control effectiveness+10

Cymulate provides a SaaS-based Breach and Attack Simulation (BAS) platform that automates cyberattack simulations across the full APT kill-chain, validating security controls in email, browser, network, endpoint, and cloud

Cynet 360 AutoXDR with MDR

24/7 threat monitoring and responseHuman-led incident investigation+8

8 products

At Cynet, we imagine a world where any company can have full cybersecurity protections.

Cyngular

Cloud Detection & Response (CDR)

The Agentic SOC of the AI era, a mesh of autonomous AI agents that detect, hunt, investigate, deceive, resolve and report, end-to-end.

D3 Security

SOAR

Autonomous alert investigation+10

D3 Security provides Morpheus AI, an autonomous AI SOC platform that investigates and triages 100% of security alerts in under three minutes using a purpose-built cybersecurity triage LLM and Attack Path Discovery.

Darktrace

NDR

7 products

Darktrace is a network detection and response vendor centered on self-learning behavioral analytics for north-south and east-west traffic.

Continuously monitors network traffic+11

DeepKeep

MLSecOps

8 products

DeepKeep is a model agnostic AI security platform

Discovers AI modelsnotebooksdatasets+21

DeepTempo

Machine speed intelligence for your SOC. LogLM finds today's attacks. Vigil turns findings into action.

Detecteam

Automate detection workflows, Generate any adversary behavior, Improve detection performance, by automating the detection lifecycle. Anticipate and Adapt your ecosystem to the agility of your adversaries.

Dropzone AI

Autonomous alert investigation+6

We build AI agents that investigate alerts, hunt threats, and respond to attacks so your organization can rapidly adapt your defenses in an increasingly dangerous threat landscape.

Druid AI

Druid AI is an enterprise AI agent platform that can be applied to security operations workflows, but its public materials are not positioned as a dedicated SOC vendor.

Elastic

Centralized security event collection+8

6 products

Elastic Security provides an open-source SIEM platform built on the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) for collecting, indexing, and analyzing security logs from endpoints, networks, clouds (AWS, Azure, Google

Embed Security

Agentic AI-driven SOC investigations+4

Embed Security delivers automated investigation and prioritization of evolving threats, empowering companies to stay ahead of risks.

Ember

Autonomous triage and investigation+4

Security was built for the world before AI. We're building the one that comes after.

Evidenx

AI assistanceDFIRentity linking+3

Evidenx is an evidence relationship tool for incident response that sits above the evidence collection tools a team already uses. It connects artifacts, observations and entities from digital forensics and incident response cases, keeping provenance attached and showing supporting and contradicting evidence, gaps and unresolved questions. AI assists with the analysis, and the investigator assesses significance and draws the conclusions.

Exabeam

Cloud-native security log managementHigh-speed log ingestion and search+8

Exabeam is the leader in behavior intelligence for the agentic enterprise.

Exaforce

AI-agent-driven autonomous alert triage+5

At Exaforce, we are on a mission to 10x improve the productivity and efficacy of security and operations teams using our transformative multi-model AI engine.

Expel

Does MDR have to be so bad? (Turns out, no.)

Ghost Security

Autonomous triage and investigation+7

Security agents that perform real work inside your environment, under your control, with your tools, your policies, your data, and your experts guiding the outcome.

HarkX

At HarkX, our mission is to secure the front lines by making the cybersecurity professional's life inherently easier and operations completely seamless.

Huntbase

Huntbase is an investigation and threat hunting platform powered by agentic AI. We focus on what happens after the alert, where context is fragmented, time is limited, and human judgment makes the difference.

Imperum

Autonomous triage and investigationCross-domain correlation+7

We are building the security layer that runs itself.

Intezer

Investigate every security alert+11

Intezer provides Forensic AI SOC, an agentic AI platform for enterprise-scale alert triage and investigation across SIEM, EDR, identity, cloud, and network sources.

JEDAI

JEDAI by Tenacium DC is a situational awareness and data intelligence platform built for high-security, complex environments such as defence, energy, aviation, and critical infrastructure.

Joon

Autonomous triage and investigation+5

Joon is an AI-native security operations platform that uses autonomous security agents to continuously detect, investigate, validate, and respond to threats.

Kai

You cannot win a machine-speed war with human-speed defenses. So we stopped deploying tools and started deploying intelligence.

Kenzo Security

Kenzo Security: The First AI Native Security Platform

Legion

Legion Security is an AI-powered security operations platform that learns how security teams investigate incidents and use their existing tools.

Louie AI

Empowering Businesses Through Technology

Mate

We are a team of AI builders, security researchers, and cyber defenders. We're building the open foundation for agentic security operations.

Mave

Autonomous triage and investigation+7

Mave delivers full SecOps coverage without the Frankenstack, the black-box MSSP and without the data tax.

Mindflow

No-code security workflow orchestration+10

Our company is dedicated to bringing answers to the challenges the cybersecurity field and beyond face today.

Nebulock

Autonomous threat hunting+8

Nebulock is an agentic threat-hunting and security analytics vendor positioned around autonomous investigation rather than classic rule-only SIEM or endpoint-only EDR.

Orryx AI

Autonomous alert triageInvestigation question generation+4

Where Human Expertise Meets Autonomous Intelligence.

Palosade

Empower businesses to embrace the product velocity enabled by AI while meeting regulations and customer security requirements

Panther

Detection-as-code in PythonCloud-native SIEM data lake+8

Our mission is to make security teams smarter and faster than attackers.

Perpetual Systems

Agentic triage and investigation+6

Perpetual Systems positions itself as a fully agentic security analytics platform for SOC operations, centered on its AI agent, Simba, which converts threat intelligence into detections, triages alerts, resolves false positives,

Port0

IAM & SSO

Identity and network context analysis+8

Port0 is a network security platform with an integrations hub and connector framework, but the available public material does not show a dedicated Identity & Access Management (IAM) product.

Prophet Security

Prophet Security is building an AI SOC platform that empowers teams to move faster and make better decisions.

Query AI

Security Data MeshQuery Workers (AI Agents)Federated Detections+1

Query makes your security data operational wherever it lives. No migration required.

Radiant Security

Investigate every alert with AI agents+6

Radiant Security provides an agentic AI SOC platform that automates alert triage, investigation, and response across SIEMs, EDRs, cloud platforms, and identity systems.

RedCarbon

7 products

Redefining cyber defense by combining cutting-edge AI Agents with human expertise to protect what matters most.

ReliaQuest

ReliaQuest delivers an Agentic AI Security Operations platform, GreyMatter, that unifies detection, investigation, and response across SIEM, EDR, and Cloud environments.

+10

Rilian

Rilian is an agentic systems integrator and technology provider.

Seceon

Autonomous alert triage+11

Seceon is a cybersecurity platform vendor positioned for SOC operations, with its aiSOC/aiSIEM and SOC automation offerings used for alert triage, investigation, threat hunting, and response orchestration.

Sevii

Sevii’s Agentic AI platform stops cyber attackers in minutes, without needing humans in the loop, delivering a Cyber ROI of reducing risk, costs, and your team’s workload.” Our modular Autonomous Defense & Remediation (ADR)

Simbian

Simbian is Building the Self-Improving Defense Platform to Stop AI Attacks

SOC Jedi AI

Autonomous triage and investigation+4

SOC Jedi.AI is an AI-powered SOC analyst platform designed to automate and accelerate security operations workflows.

SOCNova

Autonomous triage and investigation+5

SOCNova is an AI-native Security Operations Center platform that unifies threat detection, investigation, and response into a single command environment.

SOC Prime

Threat Intelligence

SOC Prime operates the world's largest and most advanced platform for detection engineering, transforming how security teams discover, build, and respond to threats through real-time intelligence, AI-driven context, and advanced

Sola Security

Autonomous triage and investigationCross-domain correlationDynamic evidence gathering+7

Sola is the enterprise security brain.

Spacewalk

Attackers move fast with AI, defenders should too. AI agents work alongside responders to cut through massive data, reduce noise, and contain threats faster and more efficiently.

Spharaka

Autonomous investigation and responseAI-powered threat hunting+5

Connect. Protect. Simplify.

Stellar Cyber

NDR

9 products

Build the platform that makes it easy for everyone to see what's coming – and act fast with confidence.

Strike48

Strike48 is the Agentic Log Intelligence Platform built to give AI agents complete visibility into your environment and the autonomy to act on what they find.

StrikeReady

AI-Powered Security Command Center+3

StrikeReady is a security operations platform positioned around an agentic SOC workflow: it centralizes security data, uses AI agents to triage and investigate alerts, and supports human-in-the-loop response decisions.

Surf AI

Context graph for security operationsSpecialized domain AI agents+8

The agentic operations platform for modern security teams

Swimlane

SOAR

Autonomous AI investigation agentsTier-1 task automation+6

Swimlane provides Swimlane Turbine, an agentic AI automation platform for AI SOCs, integrating AI agents, low-code playbooks, case management, dashboards, and reporting with infinite integrations.

TandemTrace

TandemTrace is an AI-native threat hunting platform that deploys autonomous agents to continuously monitor security telemetry across an organization’s environment.

Tencyle

AI security analysts that own the entire investigation lifecycle

ThreatLens

AI-agent-driven autonomous investigationAutonomous Tier-1/2/3 alert triage+9

ThreatLens builds AI-augmented security products that help organizations investigate threats, secure AI adoption, and make evidence-backed decisions across modern security operations.

Torq

Agentic AI triage and responseAutonomous case investigation+9

The AI SOC Platform that helps security teams triage, investigate, and respond to threats faster.

Tuskira

Security Context GraphDigital Twin Modeling+8

Tuskira is an Agentic SecOps platform that helps security teams identify, validate, prioritize, and eliminate real breach paths across their enterprise.

Uptycs

CSPM

Scan cloud estates for AI inventory+9

Uptycs offers CSPM as part of its broader cloud security platform, focused on continuously inventorying cloud assets, detecting misconfigurations, and mapping them to compliance requirements.

Vega delivers federated and AI-native search, detection, and investigation that strengthens coverage, speeds response, and gives SecOps unified access to all security data through its Security Analytics Mesh (SAM) platform.

Wirespeed

Autonomous Alert Triage+3

Wirespeed is built with decades of cybersecurity expertise on both the offense and defense side, from small startups, to the Fortune 1 - largest company in the world.

Zynap

Zynap provides an AI agent workflow platform designed to automate proactive defense operations and threat hunting.