SOAR &amp; automation

Security operations center management+11

AT&T Business offers Security Operations Center (SOC) services that combine managed monitoring, correlation, alerting, and incident response for enterprise networks and applications.

Beazley Security

Managed extended detection and response+10

Beazley Security is a cyber risk management vendor whose Security Operations offering centers on managed detection and response plus exposure management.

BlinkOps

AI agents investigate incoming alerts+8

5 products

BlinkOps is an agentic security automation platform that utilizes AI-driven agents to handle end-to-end security operations tasks including alert triage, investigation, and incident containment.

Blumira

Managed security operations support+11

Blumira is a cloud-native SIEM and XDR platform designed for mid-market organizations and MSPs.

With full-stack expertise, CDW helps you design, orchestrate and manage technologies that drive business success.

Cybaverse

Managed Detection and Response+9

The all-in-one cyber security platform that grows with you.

Cyberbit SOC 3D

Incident workflow automation+7

We help organizations build attack-ready defensive teams with simple, risk-focused exercising cycles that respect SOC time and budget.

Cydarm

Incident Case Management+3

Cydarm is a cybersecurity incident response management platform focused on security operations and SOC workflows.

Cylerian

Cynet 360 AutoXDR with MDR

By consolidating visibility and control across your organization and providing everything you need out of the box, Cylerian makes IT simpler and safer.

MDR

8 products

At Cynet, we imagine a world where any company can have full cybersecurity protections.

24/7 threat monitoring and response+9

Cyware

Threat Intelligence

5 products

Cyware enables security teams at leading global organizations to operationalize threat intelligence data and execute real-time actions by integrating intelligence management, automating workflows, and promoting secure

D3 Security

Autonomous alert investigationAttack path discovery across tools+9

D3 Security provides Morpheus AI, an autonomous AI SOC platform that investigates and triages 100% of security alerts in under three minutes using a purpose-built cybersecurity triage LLM and Attack Path Discovery.

DeepTempo

Verified · Managed by the vendor

Machine speed intelligence for your SOC. LogLM finds today's attacks. Vigil turns findings into action.

Dispel

Secure Remote AccessZero Trust EngineIntegrated Threat Monitoring+1

Dispel provides secure remote access and threat monitoring for Operational Technology (OT) and IT environments.

Elastic

Centralized security event collection+8

6 products

Elastic Security provides an open-source SIEM platform built on the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) for collecting, indexing, and analyzing security logs from endpoints, networks, clouds (AWS, Azure, Google

Fig

Next-generation firewall inspection+10

We've modernized the world's largest and most complex SOCs.

Fortinet

NGFW

8 products

Fortinet’s FortiGate line is the company’s Firewall/NGFW offering, covering stateful firewalling, application control, IPS, web filtering, SSL/TLS inspection, and threat-intelligence-backed blocking.

Glow

Endpoint software visibility+10

Control everything that runs on your endpoint - and get the fundamentals right so your team can adopt AI safely.

Google Cloud Security

DSPM

Automatic sensitive data discovery+10

Google Cloud DLP (now Sensitive Data Protection) is a fully managed service for discovering, classifying, and protecting sensitive data across Google Cloud Platform resources including BigQuery, Cloud Storage, and Datastore.

Insight

24/7 threat detection and response+7

Insight is a managed security operations provider built around its Security Operations Centre, offering 24/7 threat detection, investigation, and response for organizations that want a SOC without standing up their own team.

Introw

Partner portal management+10

Introw is a CRM-connected partner relationship management platform, not a Security Operations product.

Lockheed Martin

Cyber hardening for weapons systems+9

Lockheed Martin is a public defense contractor that offers security operations capabilities mainly as part of government and enterprise mission support rather than as a standalone commercial SOC platform.

LogicMonitor

Unified detection and governed action+6

Our observability platform proactively delivers the insights and automation CIOs need to accelerate innovation.

Lucid Software

Security and compliance controlsAutomatic content inspectionIntelligent data classification+7

Lucid is the leader in work acceleration

Palo Alto Networks

NGFW

18 products

Palo Alto Networks is the world's leading cybersecurity company delivering AI-powered platform-based security solutions for networks, cloud, identities, and security operations across enterprises globally.

Port0 is a network security platform with an integrations hub and connector framework, but the available public material does not show a dedicated Identity & Access Management (IAM) product.

Identity and network context analysis+8

Rapid7

Vulnerability Management

9 products

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience.

SecsphereSoC is an AI-powered Security Operations Center platform that provides end-to-end threat detection and response across the full attack lifecycle.

Continuous security monitoring+9

Securonix

Cloud-native SIEM data collection+8

Securonix is a cloud-native SIEM vendor offering unified detection and response across SIEM, UEBA, SOAR, and threat intelligence capabilities in a single platform.

Shuffle Security

Autonomous SOC Platform+3

Shuffle is a Security Orchestration, Automation and Response (SOAR) platform designed to streamline and scale cybersecurity operations through flexible workflow automation.

We started SIRP because security teams were drowning in alerts and tools that promised automation but still needed a human to babysit every step. OmniSense is what we built instead.

Sola Security

Autonomous triage and investigationCross-domain correlationDynamic evidence gathering+7

Sola is the enterprise security brain.

Splunk

Collect and normalize security dataCorrelate events in real time+10

5 products

Our purpose is simple and unwavering: to build a safer and more resilient digital world.

Sumo Logic

Cloud-native security analytics+8

Intelligent Operations for the AI era. Agentic AI-powered security and cloud analytics to automate, detect and investigate at the speed of now.

Swimlane

Autonomous AI investigation agents+7

Swimlane provides Swimlane Turbine, an agentic AI automation platform for AI SOCs, integrating AI agents, low-code playbooks, case management, dashboards, and reporting with infinite integrations.

Sygnia

Managed detection and response+11

Sygnia combines global reach with a boutique, highly engaged approach, bringing over a decade of frontline incident response experience in the world's most complex cyber incidents.

ThreatDefence

ThreatDefence is the only SecOps as a Service company providing broad coverage across your entire technology stack with evidence-based security.

TierPoint

Managed SOC monitoring+11

We are security-focused, cloud-forward, and data center-strong, a champion for untangling the hybrid complexity of modern IT, so you can free up resources to innovate, exceed customer expectations, and drive revenue.

Tines

Alert deduplicationAPI integrations+3

We believe that by combining AI, automation, and integration with human ingenuity organizations are more efficient, secure, and will have more engaged, happier teams.

Verified · Managed by the vendor

T-Mobile

24/7/365 security monitoringIncident triage and prioritization+8

T-Mobile’s Security Operations Center (SOC) is a managed security operations service for Polish business customers that focuses on continuous monitoring, incident detection, triage, and response support for IT security events.

Torq

Agentic AI triage and responseAutonomous case investigation+9

The AI SOC Platform that helps security teams triage, investigate, and respond to threats faster.

TraceCat

AI Agents and Automation+3

Tracecat is an open-source AI-native Security Orchestration, Automation, and Response (SOAR) platform.

Trellix Helix

Unified cloud and network policy control+10

Trellix Helix is a SaaS security operations platform that unifies SIEM, SOAR, and threat intelligence, integrating over 600 Trellix and third-party tools for multi-vector threat detection and response.

Tufin is best known for network security policy orchestration, but its cloud security offering extends that policy management model into public cloud environments.

Wraithwatch

Wraithwatch is a next-generation cyber defense data fabric and control plane that unifies security telemetry across tools and environments.

Agentic Threat Hunting+9

Zeronsec