CISO Tribune

Vendor comparison · 2 companies

Exaforce vs Threat Intelligence

Exaforce sells a platform built on a unified data layer and real-time knowledge graph, with agents that help security teams detect, triage, investigate, and respond to threats. Threat Intelligence delivers cyber security products and services. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Exaforce
  • Threat Intelligence
Exaforce vs Threat Intelligence: Products, Customers and Funding Compared
ExaforceExaforce sells a platform built on a unified data layer and real-time knowledge graph, with agents that help security teams detect, triage, investigate, and respond to threats.exaforce.comThreat IntelligenceThreat Intelligence delivers cyber security products and services.threatintelligence.com
What it sells
  • Exabot Triage[1][4]Investigates security alerts and classifies them.
  • Exabot Investigate[1][6]Supports natural language search and visual exploration for investigations.
  • Exabot Respond[1][7]Executes response across endpoint, identity, IaaS, SaaS, and email.
  • Evolve Security Automation[1][11][12]Evolve built-in security capabilities automatically detect, prioritize, and remediate threats.
  • EvolvePT[5][6]EvolvePT is an automated pen testing solution.
  • EvolveAST[7]EvolveAST helps organizations orchestrate and automate application security testing in DevOps pipelines.
  • EvolveIR[8]EvolveIR is an automated incident response tool.
  • Penetration Testing Services[6][9]Penetration Testing Services proactively identify the most exploitable security vulnerabilities of infrastructure.
  • Governance, Risk and Compliance Services[9]Assessments and consulting services to help identify risk levels and compliance requirements.
  • EvolveMDR[11]EvolveMDR combines security specialists with Evolve Security Automation capabilities to streamline security operations.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately heldNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 11, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetNot written yet
Last verified
November 6, 2026November 6, 2026

Where they overlap

  • Exaforce and Threat Intelligence are both filed under MDR and managed SOC.

Where they differ, field by field

  • Exaforce's primary category is AI SOC analysts; Threat Intelligence's is Breach simulation and automated pen-testing.
  • Exaforce is also filed under SIEM and AI model and agent security. Threat Intelligence is also filed under Incident response and forensics and Digital risk protection.
  • Exaforce lists Exabot Triage, Exabot Investigate and Exabot Respond. Threat Intelligence lists Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.
  • Exaforce is privately held.

What it sells: Exaforce

What Exabot Triage does[1][4]
Exabot Triage investigates security alerts across SIEM, EDR, phishing tools, and Exaforce detections. Exabot Triage classifies alerts as False Positive, Benign, or Needs Investigation.
What Exabot Investigate does[1][6]
Exabot Investigate supports natural language search, visual exploration, and simplified queries across data sources. Exabot Investigate operates independently of any SIEM. Query Builder in Exabot Investigate combines behavioral events and configuration context into a single query.
What Exabot Respond does[1][7]
Exabot Respond executes response across endpoint, identity, IaaS, SaaS, and email, with out-of-the-box playbooks for common scenarios. Customers can build custom workflows in a visual drag-and-drop builder using nodes for conditions, actions, approvals, AI reasoning, loops, and branching. Automation Agents can run workflows autonomously or with human approvals.

What it sells: Threat Intelligence

What Evolve Security Automation does[1][11][12]
Evolve automatically generates pre-configured Evolve Virtual Appliances for deployment into corporate networks and on-premise data centers. Evolve Virtual Appliances support VMware or Hyper-V, and third-party cloud providers including AWS and Azure. Evolve maps major security standards and frameworks to ensure the right security controls are in place.
What EvolvePT does[5][6]
Threat Intelligence combines its penetration testing tool, EvolvePT, with a certified, principal-only team of penetration testing consultants. Symbion turned to EvolvePT, an automated pen testing solution.
What EvolveAST does[7]
EvolveAST helps organizations orchestrate and automate the integration of application security testing into DevOps pipelines. Evolve integrates automated application security testing into the standard business as usual processes and technologies of development teams.
What EvolveIR does[8]
EvolveIR is an automated incident response tool that can detect and respond to security threats. Threat Intelligence offers an incident response solution that uses its security team and EvolveIR.
What Penetration Testing Services does[6][9]
Threat Intelligence uses a Purple Team method in which its Principal Consultants collaborate with the internal security team of the customer. Threat Intelligence evaluates web and mobile applications in five phases: reconnaissance, scanning, vulnerability assessment, exploitation, and reporting. Penetration Testers at Threat Intelligence hold qualifications like CEH, OSCP, or GPEN.
What Governance, Risk and Compliance Services does[9]
In its IRAP assessments, Threat Intelligence guides customers through Information Security Registered Assessors Program (IRAP) compliance. Threat Intelligence provides guidance on securing ISO 27001 certification for an Information Security Management System (ISMS).
What EvolveMDR does[11]
Threat Intelligence specialists help customers mitigate threats and create a detection and prevention program. Threat Intelligence describes security and IT teams with limited skills and resources as facing challenges in managing risks and meeting compliance requirements.

Questions about Exaforce and Threat Intelligence

What do Exaforce and Threat Intelligence sell?
Exaforce sells Exabot Triage, Exabot Investigate and Exabot Respond. Threat Intelligence sells Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.
Are Exaforce and Threat Intelligence in the same category?
They share MDR and managed SOC. Exaforce's primary category is AI SOC analysts and Threat Intelligence's is Breach simulation and automated pen-testing.
Who owns Exaforce and Threat Intelligence?
Exaforce is privately held.

About Exaforce

Exaforce sells a platform built on a unified data layer and real-time knowledge graph, with agents that help security teams detect, triage, investigate, and respond to threats. Four Exabots cover detection, triage, investigation, and response on a unified, real-time view of the customer environment. Exaforce lets customers run the platform with an in-house team, or have Exaforce run it with its analysts and Exabots working as an extended SOC.[1][3][4][5]

Exaforce pairs its agentic AI with a global team of experts to deliver MDR. The global Exaforce SOC pairs responders with agentic AI to deliver hands-on monitoring, investigation, and containment around the clock.[5]

Exaforce builds on a dedicated data layer that ingests logs and configuration across identity, cloud, endpoint, code, and SaaS. Exaforce ingests logs, alerts, and telemetry from over 100 sources, including GitHub and Google Workspace, and normalizes them into a single security data layer. Exaforce stores all raw data in real time, then normalizes and enriches telemetry. Exaforce's data platform uses storage tiering to keep hot data accessible while retaining full history for audits. Exaforce connects through agentless, API-based connectors that pull telemetry from cloud, identity, SaaS, endpoint, and code platforms. Exaforce has prebuilt integrations for AWS, Google Cloud, Okta, GitHub, Microsoft 365, CrowdStrike, Wiz, and more, each mapped to a common schema. Exaforce reads from where customer data lives, so customers can start without re-routing pipelines.[3][4]

At the core of Exaforce is a Multi-Model AI engine that combines data semantics, behavioral baselining, machine learning, and large language models. Exaforce's Multi-Model AI separates data relationships, anomaly detection, and expert reasoning into dedicated models. In the Exaforce platform, the Semantic Model transforms raw data into actionable intelligence, and the Behavioral Model separates real threats from normal activity.[3][4]

Exabot Detect monitors IaaS and SaaS environments with the Multi-Model AI engine to identify breaches that evade traditional rules and UEBA. Exabot Detect correlates behavioral baselines and contextual intelligence to surface attacks across environments like AWS, Okta, OpenAI, and GitHub. Exabot Triage investigates security alerts across SIEM, EDR, phishing tools, and Exaforce detections. Exabot Triage classifies alerts as False Positive, Benign, or Needs Investigation. Exabot Investigate supports natural language search, visual exploration, and simplified queries across data sources. Exabot Investigate operates independently of any SIEM. Exabot Respond executes response across endpoint, identity, IaaS, SaaS, and email, with out-of-the-box playbooks for common scenarios. Exabot Respond can isolate cloud instances, quarantine or delete malicious emails, block IPs, disable endpoints, reset MFA or passwords, suspend users, and revoke sessions.[1][4][5][6][7]

Exaforce provides an inventory of human, non-human, AI agent, and third-party identities, with their effective permissions, credentials, and actions. Exaforce monitors collaboration, version control systems, and other apps with ML-based detections. Exaforce detects threats in Google Workspace without manual rule creation. For insider threats, Exaforce combines cloud logs, permissions, and HR data into one insider threat narrative. For phishing, Exaforce supports triage and investigation of phishing incidents across the email ecosystem.[8][9][10][11]

Exaforce can either be a customer's primary SOC tech stack or augment an existing SOC investment. Many teams deploy Exabots alongside their current SIEM, EDR, and security stack to handle high-volume tier-1 triage and tier-2 investigation. Exaforce ingests alerts from existing tools, enriches them with unified context, and delivers investigated findings with recommendations. Exaforce is audited and certified by third party standards.[1][2][4][6][7][12][13]

Exaforce on the record

Sources

Exaforce full record

  1. [1]exaforce.comExaforce · exaforce.com · undated page, accessed November 6, 2026 · Tier A
  2. [2]Exaforce unveils 75 million in series a funding to revolutionize security and operations with agentic aiExaforce · exaforce.com · published April 17, 2025 · Tier A
  3. [3]Exaforce — Agentic SOC and MDRExaforce · undated page, accessed November 10, 2026 · Tier A
  4. [4]Agentic AI SOC Platform Overview | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A
  5. [5]Find an MDR Partner | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A
  6. [6]Exabot Investigate | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A
  7. [7]Exabot Respond | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A
  8. [8]Identity Attack Surface | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A
  9. [9]SaaS Attack Surface | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A
  10. [10]Insider Attack Surface | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A
  11. [11]Agentic AI SOC Platform & MDR Solutions | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A
  12. [12]Exaforce MCP Connector for ClaudeExaforce · undated page, accessed November 10, 2026 · Tier A
  13. [13]AI for SOC | ExaforceExaforce · undated page, accessed November 10, 2026 · Tier A

Threat Intelligence full record

  1. [1]threatintelligence.comThreat Intelligence · threatintelligence.com · undated page, accessed November 6, 2026 · Tier A
  2. [2]We are Threat IntelligenceThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  3. [3]Cybersecurity Solutions| Pentesting | IR | MSSP | AUSThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  4. [4]Evolve Cybersecurity PlatformThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  5. [5]Automated Penetration Testing Case Study | EvolvePTThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  6. [6]Penetration Testing Services | Red Team | AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  7. [7]EvolveAST Application Security TestingThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  8. [8]Incident Response and Digital Forensic InvestigationsThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  9. [9]Cyber Security Professional ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  10. [10]Governance, Risk and Compliance ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  11. [11]Managed Security Services AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  12. [12]Security Automation Case Study - Evolve and GTLawThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  13. [13]SOCRadar Extended Threat Intelligence Reviews 2026G2 · undated page, accessed November 11, 2026 · Tier C

Spot a factual error? Request a correction.