AI SOC analysts
Software agents that triage, investigate and document security alerts with limited human input.
15 vendors · alphabetical, never ranked
- AnomaliAnomali sells a security operations platform combining a data lake, threat intelligence and AI agents that triage and investigate alerts.Ownership not established · primary category
- Dropzone AIDropzone AI sells an AI SOC analyst that autonomously investigates security alerts around the clock across an organization's SIEM, EDR and cloud tools, producing investigation reports.Privately held · primary category
- ExabeamExabeam sells New-Scale Fusion, a cloud-native platform that combines a SIEM with behavioral analytics, automation and AI agents for threat detection, investigation and response.Owned by Thoma Bravo since 2024
- GraylogGraylog sells an AI-powered SIEM and centralized log management platform that helps security and IT teams detect and investigate threats, summarize dashboards and automate workflows.Ownership not established
- HuntersHunters sells a cloud-native SOC platform that ingests, retains and correlates security data to detect, investigate and respond to threats, along with Pathfinder AI, an agentic AI capability that automates alert triage and investigation.Ownership not established
- IRONSCALESIRONSCALES sells an email security platform that combines machine learning threat detection with employee-reported phishing data, including an AI-driven incident response component branded Themis.Privately held
- KaiKai, legally Kai Cyber, Inc., sells an agentic AI platform that identifies security exposures, assesses which ones represent real risk, and remediates them across threat intelligence, exposure management, detection and response.Privately held · primary category
- PantherPanther sells an AI SOC platform that combines a security data lake, detection-as-code rules and an AI layer, so that analyst investigation outcomes feed back into the detections that generated the alerts.Ownership not established · primary category
- Prophet SecurityProphet Security sells an agentic AI SOC platform that automates the triage, investigation and response process for security alerts.Privately held · primary category
- SecuronixSecuronix sells Unified Defense SIEM, a cloud-native platform that combines security information and event management with user and entity behavior analytics, SOAR and threat intelligence, along with an AI agent called Sam that helps triage alerts.Ownership not established
- Stellar CyberStellar Cyber sells a SecOps platform that unifies SIEM, network detection and response, identity threat detection and response, and user and entity behavior analytics with AI-driven detection, investigation and response.Privately held
- Sublime SecuritySublime Security sells an email security platform built around AI agents that triage reported and suspicious emails and design new detections, along with an email data loss prevention module.Privately held
- SwimlaneSwimlane sells Turbine, an agentic AI automation platform that combines AI with deterministic security automation to investigate alerts, orchestrate response, and automate vulnerability and compliance workflows.Privately held
- TinesTines sells a no-code workflow platform for building, running and monitoring security and IT automations, including a workflow builder, an AI copilot called Workbench, and case management.Privately held
- TorqTorq sells an AI SOC platform that combines agentic AI reasoning with automation to enrich, investigate and act on security alerts from initial triage through remediation.Privately held · primary category
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.