Cyberfuturists · 16 September–16 October 2026

AI in the SOC Market Maturity Map

How is AI-led SOC automation evolving, and which vendors show material change in capabilities, commercial traction, workforce, funding, partnerships, customer adoption, positioning, or risk?

Vendors that use AI to detect, investigate and respond to threats, and to automate the work of security operations (SOC) teams. It covers AI SOC analysts and agentic SOC platforms, and the established SIEM, XDR, EDR and SOAR platforms adding the same capabilities. 115 vendors, 16 September–16 October 2026.

Generated 16 October 2026, 04:55 UTC

Market Maturity MapWhere 97 of the market's 100 vendors are mapped today, based on how active they are, how they are growing and how fast they are moving.

Vendors placed by size and by growth, from public data we collect: headcount, followers, funding, customers, open roles, launches and mentions. It does not rate product quality, customer satisfaction or strategy. Computed 2026-10-15 over the last 90 days.

Highlight Show

Who is where — Executing 14, Scaling 29, Building 36, Emerging 18; accelerating 16, growing 62, holding 19, innovating 33, hiring 7, raised in the last year 27, acquired 3, pivoted 1, large incumbents 17

Marks after a name: ◌ innovating · ⚒ hiring · $ raised in the last year · "(was …)" moved stage since the previous map. Each mark belongs to the name before it.

Executing (14) — the largest vendors: scale of 75 and over

7AI ◌ ⚒ $, Exaforce ◌ $, Anvilogic ◌ $, BlinkOps $, Stellar Cyber, Dropzone AI ◌ $, Intezer ◌, Prophet Security ◌ $, Kai Security ◌ ⚒, Artemis Security ◌ ⚒ $, Daylight Security ◌ $, Qevlar ⚒, Strike48 (A Devo company) ◌, Legion Security

Scaling (29) — scale from 50 to 75

Eventus Security, D3 Security ◌, Cantina ◌ $, TechBridge Consultancy Services, Mate Security $, HawkEye ◌, Simbian ◌, Crogl ◌, UnderDefense, AquilaI, Twine Security, Binalyze ◌, DeepTempo, Securaa, BEYON Cyber, Method Security ⚒ $, Command Zero ◌, Andesite, Beacon Security $, Fig Security ◌ $, Cognna $, StrikeReady $, Spectrum Security ◌ $, Tuskira ◌, Nebulock ◌ $, Cylerian ◌, Conifers AI ◌ $, Backline AI ◌, Mars Security

Building (36) — scale from 25 to 50

AiStrike $ (was innovators), Rilian $ (was innovators), Spharaka, Wraithwatch ⚒, Nua, Embed Security, Opnova, Bricklayer AI ◌, Variance (was Intrinsic) ⚒, Imperum ◌ $, Sevii ◌ $, Camelot Secure ◌, Secure.com ◌ $, PRE Security, Redblock, Tenacium $, guarddog, Detections AI (was System Two Security) ◌ $, Cotool ◌ $, Mave $, Joon, Arcanna.ai, RedCarbon, SecsphereSOC, Alpha Level, HTCD, Spacewalk AI, AISOC, Seculyze, Tencyle, Sleuth Kit Labs, Louie AI ◌, Almanax, Arambh Labs, Elezar, HoundBytes

Emerging (18) — the smallest vendors: scale under 25

CipherData, Threatlens, FlintX, Tier4ai, WiseBee, Priam Cyber AI, HarkX, TandemTrace, VisionHeight, Miru Labs, CounterShadow, SOCNova, Tracecat, Vinci Logic, NextSOC, VigilBase, SOC Jedi.ai, Huntbase ◌

Accelerating (16) — momentum of 67 and over

7AI, Detections AI (was System Two Security), Exaforce, Prophet Security, Nebulock, Dropzone AI, Daylight Security, Secure.com, Artemis Security, Bricklayer AI, Kai Security, Cognna, Mate Security, Method Security, Spharaka, Stellar Cyber

Growing (62) — momentum from 33 to 67

Tuskira, Crogl, Qevlar, Legion Security, Twine Security, Anvilogic, Binalyze, Huntbase, VigilBase, Threatlens, Cantina, Fig Security, Mars Security, Rilian, Cotool, Cylerian, Intezer, Wraithwatch, Sevii, Spectrum Security, AquilaI, Camelot Secure, Eventus Security, Embed Security, BlinkOps, D3 Security, Mave, Miru Labs, Louie AI, SOCNova, Command Zero, Imperum, Simbian, Andesite, HawkEye, Variance (was Intrinsic), WiseBee, BEYON Cyber, CipherData, Arambh Labs, Backline AI, Tracecat, AiStrike, Strike48 (A Devo company), TechBridge Consultancy Services, Conifers AI, VisionHeight, Alpha Level, StrikeReady, HTCD, PRE Security, guarddog, RedCarbon, HarkX, NextSOC, UnderDefense, Seculyze, Redblock, Beacon Security, HoundBytes, DeepTempo, Opnova

Holding (19) — momentum under 33

AISOC, FlintX, Nua, Spacewalk AI, Tier4ai, Priam Cyber AI, Tenacium, CounterShadow, Vinci Logic, SOC Jedi.ai, Securaa, Sleuth Kit Labs, TandemTrace, SecsphereSOC, Tencyle, Arcanna.ai, Joon, Elezar, Almanax

Innovating (33) — top third by launches, corroborated launches, research posts and engineering hiring; a marker across every tier

7AI, Exaforce, Dropzone AI, Prophet Security, Artemis Security, Daylight Security, Kai Security, Anvilogic, Intezer, Crogl, Cantina, Nebulock, Binalyze, D3 Security, Strike48 (A Devo company), Tuskira, Detections AI (was System Two Security), Fig Security, Secure.com, Bricklayer AI, HawkEye, Simbian, Cylerian, Command Zero, Spectrum Security, Backline AI, Sevii, Conifers AI, Cotool, Camelot Secure, Imperum, Louie AI, Huntbase

Hiring (7) — top third by open roles per 100 staff, with at least 3 roles open; a marker across every tier

Variance (was Intrinsic) (9 open roles, 45 per 100 staff), Wraithwatch (6 open roles, 38 per 100 staff), Method Security (9 open roles, 29 per 100 staff), Artemis Security (15 open roles, 24 per 100 staff), 7AI (39 open roles, 22 per 100 staff), Kai Security (18 open roles, 21 per 100 staff), Qevlar (18 open roles, 20 per 100 staff)

Raised in the last year (27) — a round dated inside the last 365 days, from the vendor's own post, a matched news event or the Crunchbase news list

Prophet Security (round not stated, 2026-10), StrikeReady (round not stated, 2026-09), 7AI (Series A, 2026-08), Mate Security (Seed, 2026-07), Cantina (round not stated, 2026-07), Beacon Security (Seed, 2026-07), Imperum (Seed, 2026-07), Anvilogic (round not stated, 2026-07), Nebulock (Series A, 2026-06), Exaforce (Series B, 2026-05), Detections AI (was System Two Security) (round not stated, 2026-05), Spectrum Security (Seed, 2026-04), Rilian (Seed, 2026-04), Artemis Security (Series A, 2026-04), Tenacium (round not stated, 2026-03), Daylight Security (Series A, 2026-03), Cotool (Seed, 2026-03), Fig Security (Seed, 2026-03), Sevii (round not stated, 2026-02), Dropzone AI (Series B, 2026-01), AiStrike (Seed, 2026-01), Mave (Seed, 2026-01), Cognna (Series A, 2025-12), Secure.com (Seed, 2025-11), Method Security (Seed, 2025-11), BlinkOps (round not stated, 2025-11), Conifers AI (Strategic, 2025-10)

Acquired (3) — on the record, not on the map

Wirespeed — by Coalition, 2025-11-06; Kenzo Security — by Rapid7, 2026-03-26; Radiant Security — by Cribl (AI technology assets), 2026-08-19

Pivoted (1) — left this market for another; on the record, not on the map

Zaun — now security for AI (securing AI systems and agents), no longer AI for security operations

Large incumbents (17) — in this market, but too large to compare on size; listed, not on the map

Arctic Wolf; CrowdStrike; Elastic; Exabeam; Fortinet; Google SecOps (Google); IBM; Leidos; Mandiant (Google); Microsoft; Palo Alto Networks; Rapid7; SentinelOne; ServiceNow; Splunk (Cisco); Torq; Trellix

Analyst notes and adjustments (21)

Redblock: Active. Was marked closed on 31 Aug 2026 from a Crunchbase record that belonged to a different company (RedBlock, a blockchain firm at redblock.network). That record was retired on 9 Oct 2026. Redblock posts on LinkedIn (9 posts in the 30 days to 8 Oct), launched SailPoint AI agent deployment in March 2026, and is hiring.
Kenzo Security: Acquired by Rapid7; Crunchbase records the transaction and the company's own LinkedIn post of 26 March 2026 announced it. Listed as acquired, not placed.
Radiant Security: Cribl bought Radiant Security's AI SOC technology assets on 19 August 2026 (Cribl announcement; second security acquisition this year). Listed as acquired, not placed.
Zaun: now security for AI (securing AI systems and agents), no longer AI for security operations
Arctic Wolf: Large incumbent: Arctic Wolf is in this market through the Aurora Agentic SOC (March 2026), run inside its managed detection and response service. Its size is not comparable, so it is listed, not placed.
CrowdStrike: Large incumbent: CrowdStrike is in this market through Charlotte AI. Its headcount and followers are the whole company's, so it is listed, not placed.
Elastic: Large incumbent: Elastic is in this market through Elastic Security and the Elastic AI SOC Engine. Its size is not comparable, so it is listed, not placed.
Exabeam: Large incumbent: Exabeam (merged with LogRhythm in 2024) is an established SIEM vendor in this market through Exabeam Nova. Listed, not placed.
Fortinet: Large incumbent: Fortinet is in this market through FortiSOC and its FortiAI agents. Its size is not comparable, so it is listed, not placed.
Google SecOps (Google): Large incumbent: Google is in this market through Google Security Operations (Google SecOps). Its LinkedIn link is Google's company page, not the Google Cloud showcase page, which the collector has not been tested on.
IBM: Large incumbent: IBM is in this market through ATOM, its agentic SOC engine, delivered mainly through its managed detection and response services. Its size is not comparable, so it is listed, not placed.
Leidos: Leidos is a defence and IT contractor of about 47,000 staff. It entered this market with UpHold Effect Agentic SOC Automation on 29 Sep 2026. Its headcount and LinkedIn followers describe all of Leidos, not the product.
Mandiant (Google): Large incumbent: Mandiant, part of Google Cloud since 2022, is in this market through Mandiant Threat Defense. It is tracked apart from Google Cloud (searched as Google Security Operations) so the two product lines stay separate. Listed, not placed.
Microsoft: Large incumbent: Microsoft is in this market through Security Copilot. Its LinkedIn link is the whole company's page, not Microsoft Security's showcase page, which the collector has not been tested on.
Palo Alto Networks: Large incumbent: Palo Alto Networks is in this market through Cortex XSIAM and AgentiX. Its headcount and followers are the whole company's, so it is listed, not placed.
Rapid7: Large incumbent: Rapid7 is in this market through Incident Command and bought Kenzo Security in March 2026. Its size is not comparable, so it is listed, not placed.
SentinelOne: Large incumbent: SentinelOne is in this market through Purple AI. Its size is not comparable, so it is listed, not placed.
ServiceNow: Large incumbent: ServiceNow is in this market through Security Operations and its SOC AI Specialist (due December 2026). Its size is not comparable, so it is listed, not placed.
Splunk (Cisco): Large incumbent: Cisco sells its agentic SOC as Splunk (Splunk Enterprise Security and the Splunk Agentic SOC Workforce) together with Cisco XDR, so this one entry covers both and is searched under both names. Its size is not comparable, so it is listed, not placed.
Torq: Large incumbent: Torq (476 staff, $332M raised, valued at $1.2B in January 2026) is the largest of the security-automation vendors, so it is listed with the incumbents rather than ranked against startups. Listed, not placed.
Trellix: Large incumbent: Trellix (McAfee Enterprise and FireEye, owned by STG) is in this market through Trellix Wise. Its size is not comparable, so it is listed, not placed.

Not rated (1) — what each one lacks

A vendor is rated only when we have every input. 1 lack linkedin headcount (latest count); 1 lack linkedin followers; 1 lack open roles per 100 staff.

SOCAI: linkedin headcount (latest count), linkedin followers, open roles per 100 staff

How the map is computed — weights and rules

Input	Axis	Weight
LinkedIn headcount (latest count)	scale	0.35
Disclosed funding total (optional)	scale	0.30
Customer evidence, weighted, last 12 months named customer in their own words 3, named in the vendor's words 2, unnamed 1	scale	0.25
LinkedIn followers	scale	0.10
Headcount change in the period (optional)	momentum	0.30
Launches and partnerships in the period	momentum	0.25
Earned mentions in the period	momentum	0.15
Open roles per 100 staff	momentum	0.15
Crunchbase growth score (secondary) (optional)	momentum	0.10
Own LinkedIn posts in the period	momentum	0.05

Each input is a percentile rank among the rated vendors; an axis is the weighted mean of its inputs. On the map, the angle is the stage, by scale: Emerging under 25, Building from 25, Scaling from 50, Executing from 75, left to right. The distance from the base is momentum: holding under 33, growing from 33, accelerating from 67. A vendor moves right as it grows and outward as it speeds up.

Executive assessment

4 findings

2 acquisitions among the vendors we track.
Leidos acquired Analogic on 5 October. Coalition, Inc. acquired Wirespeed on 17 September.
- Leidos Security Enterprise Solutions and Analogic close acquisition deal (Vendor sources only, 5 Oct 2026)
- Coalition acquired Wirespeed for millisecond threat response capability (Vendor sources only, 17 Sep 2026)
New funding for StrikeReady, Prophet Security.
StrikeReady raised a new round led by Wa'ed Ventures on 16 September. StrikeReady says it has raised $29M in total. Prophet Security raised a strategic round; the amount is not stated on 8 October.
- StrikeReady raises funding led by Wa'ed Ventures (Also reported independently, 16 Sep 2026)
- Prophet Security raises strategic investment from Amex and Citi Ventures (Vendor sources only, 8 Oct 2026)
Customer announcements from CrowdStrike, Nebulock, Qevlar, 7AI and 6 more.
10 customer or deployment announcements, 9 of them naming the customer.
- Solarig standardizes on CrowdStrike Falcon platform for security (Vendor sources only, 1 Oct 2026)
- Global software company uses Nebulock for insider risk program (Vendor sources only, 25 Sep 2026)
- Vancord chooses Qevlar AI over building investigation tool in-house (Vendor sources only, 14 Oct 2026)
- Cole, Scott & Kissane uses 7AI to cut investigation time (Vendor sources only, 13 Oct 2026)
- Oldcastle APG uses Palo Alto Networks Prisma SASE and ADEM (Vendor sources only, 13 Oct 2026)
54 of 115 vendors had a development.
99 developments in 30 days, plus 21 hiring or headcount signals. The 11 vendors with 3 or more developments account for 37% of them (Splunk 6, Arctic Wolf 4, AquilaI 3, CrowdStrike 3, Elastic 3, and 6 more). 51 vendors were watched and had none. 10 are not fully collected yet.
- Splunk: 6 developments
- Arctic Wolf: 4 developments
- AquilaI: 3 developments
- CrowdStrike: 3 developments
- Elastic: 3 developments

Weekly briefing

Week of 2026-09-14 · approved 22 September 2026

AI in the SOC — Week of 2026-09-14

Multiple vendors announced new capabilities or product versions during the week.

Read the briefing

Vendors with a development

120 developments · 54 vendors

Vendor	Development	Evidence	Why it matters
StrikeReady	StrikeReady raises funding led by Wa'ed Ventures Funding · 16 Sep 2026	@thedatatechtimes.bsky.social on Bluesky · 2 sources Also reported independently	$29M raised in total, the vendor says.
Stellar Cyber	Stellar Cyber releases 7.0 with AI case triage and APIs Product expansion · 5 Oct 2026	helpnetsecurity.com · 5 sources Reported by multiple independent sources	INTRODUCING...7.0!
Leidos	Leidos Security Enterprise Solutions and Analogic close acquisition deal Acquisition · 5 Oct 2026	the company's LinkedIn post · 1 source Vendor sources only
Wirespeed	Coalition acquired Wirespeed for millisecond threat response capability Acquisition · 17 Sep 2026	the company's LinkedIn post · 1 source Vendor sources only	Bought by Coalition, Inc..
Prophet Security	Prophet Security raises strategic investment from Amex and Citi Ventures Funding · 8 Oct 2026	the company's website · 1 source Vendor sources only	A strategic round; the amount is not stated.
Strike48	Strike48 launches on-prem agentic SOC appliance for air-gapped deployments Product expansion · 23 Sep 2026	@bigearthdata.ai on Bluesky · 2 sources Also reported independently	Strike48 now supports four deployment models: cloud, private cloud, on-premises, and fully air-gapped.
Intezer	Intezer revenue triples as enterprise AI security expands Product expansion · 2 Oct 2026	securitybrief.in · 1 source Also reported independently
SentinelOne	SentinelOne extends Wayfinder coverage across endpoints, identities, and cloud workloads Product expansion · 25 Sep 2026	helpnetsecurity.com · 1 source Also reported independently	SentinelOne announced expanded Wayfinder Threat Hunting to AWS, Azure, and Google Cloud, combining AI-powered Singularity Platform telemetry with…

Other developments (112)

CrowdStrike	Inside CrowdStrike’s Move To Secure Enterprise Agentic AI	Product expansion · 23 Sep 2026	1 source · Also reported independently
Exabeam	Exabeam releases October 2026 New-Scale platform update	Product launch · 1 Oct 2026	8 sources · Reported by multiple independent sources
Trellix	Trellix Redefines Cyber Defense for the AI Era	Product launch · 14 Oct 2026	4 sources · Reported by multiple independent sources
Artemis Security	Artemis Security launches Orion-1 frontier model for cyber defense	Product launch · 8 Oct 2026	4 sources · Reported by multiple independent sources
Elastic	Elastic’s AlertZero puts AI agents to work on security alert overload	Product launch · 8 Oct 2026	2 sources · Reported by multiple independent sources
Arctic Wolf	Arctic Wolf launches SwarmView for AI investigation visibility	Product launch · 14 Oct 2026	4 sources · Also reported independently
Exabeam	Exabeam adds Agentic SOC capabilities to New-Scale platform	Product launch · 1 Oct 2026	3 sources · Also reported independently
Splunk	Splunk introduces new Agentic SOC capabilities at SplunkConf26	Product launch · 2 Oct 2026	2 sources · Also reported independently
Microsoft	Microsoft launches reimagined Copilot with Home, Code and Autopilot capabilities	Product launch · 25 Sep 2026	2 sources · Also reported independently
CrowdStrike	Solarig standardizes on CrowdStrike Falcon platform for security	Customer evidence · 1 Oct 2026	3 sources · Vendor sources only
Nebulock	Global software company uses Nebulock for insider risk program	Customer evidence · 25 Sep 2026	2 sources · Vendor sources only
Qevlar	Vancord chooses Qevlar AI over building investigation tool in-house	Customer evidence · 14 Oct 2026	1 source · Vendor sources only
7AI	Cole, Scott & Kissane uses 7AI to cut investigation time	Customer evidence · 13 Oct 2026	1 source · Vendor sources only
Palo Alto Networks	Oldcastle APG uses Palo Alto Networks Prisma SASE and ADEM	Customer evidence · 13 Oct 2026	1 source · Vendor sources only
Torq	EQUANS CISO describes AI-enhanced SOC built with Torq	Customer evidence · 8 Oct 2026	1 source · Vendor sources only
ServiceNow	LTM deploys 1,500 ServiceNow AI agents alongside staff	Customer evidence · 7 Oct 2026	1 source · Vendor sources only
Stellar Cyber	Capgemini Brazil uses Stellar Cyber for AI-driven cyberthreat response	Customer evidence · 30 Sep 2026	1 source · Vendor sources only
Strike48	Tronox uses Strike48 agents for SOC automation	Customer evidence · 29 Sep 2026	1 source · Vendor sources only
Spectrum Security	SEP2 doubles detection rule coverage with Spectrum Security	Customer evidence · 25 Sep 2026	1 source · Vendor sources only
Cotool	Cotool adds Opus 5.5, GPT-6 Sol, GPT-6 Luna to model catalog	Product expansion · 12 Oct 2026	1 source · Vendor sources only
Elastic	Elastic launches nightshift AI SRE in private preview	Product expansion · 8 Oct 2026	1 source · Vendor sources only
NextSOC	NextSOC launches agentic security operations platform	Product expansion · 6 Oct 2026	1 source · Vendor sources only
Arctic Wolf	Arctic Wolf adds 13 new integrations to Aurora Superintelligence Platform	Product expansion · 5 Oct 2026	1 source · Vendor sources only
BlinkOps	BlinkOps integrates with Microsoft Sentinel Data Lake	Product expansion · 23 Sep 2026	1 source · Vendor sources only
Exaforce	Exaforce introduced Agentless AI Security for AI agent visibility and control	Product expansion · 17 Sep 2026	1 source · Vendor sources only
Arctic Wolf	Arctic Wolf partners with Veeam on backup infrastructure security	Partnership · 12 Oct 2026	2 sources · Vendor sources only
Exaforce	Exaforce partners with KDDI America and KDDI Europe	Partnership · 23 Sep 2026	2 sources · Vendor sources only
IBM	IBM and MeitY Startup Hub sign MoU for India startups	Partnership · 13 Oct 2026	1 source · Vendor sources only
Camelot Secure	Camelot Secure partners with Baltimore Ravens on cybersecurity	Partnership · 9 Oct 2026	1 source · Vendor sources only
Torq	Torq and Upwind Security launch native integration	Partnership · 9 Oct 2026	1 source · Vendor sources only
Fortinet	Fortinet partners with IBM Cloud for FortiGate VM NGFW	Partnership · 8 Oct 2026	1 source · Vendor sources only
Prophet Security	Prophet Security partners with ExtraHop to integrate NDR data	Partnership · 8 Oct 2026	1 source · Vendor sources only
Stellar Cyber	Stellar Cyber integrates with Check Point for alert correlation	Partnership · 8 Oct 2026	1 source · Vendor sources only
7AI	7AI integrates with Upwind Security	Partnership · 7 Oct 2026	1 source · Vendor sources only
CrowdStrike	CrowdStrike partners with CyberCert for ANZ SMB market	Partnership · 6 Oct 2026	1 source · Vendor sources only
Twine Security	Twine Security integrates with Cyera for data risk remediation	Partnership · 6 Oct 2026	1 source · Vendor sources only
AquilaI	Aquila I goes live with Starburst for security data management	Partnership · 3 Oct 2026	1 source · Vendor sources only
Palo Alto Networks	Cyderes Partners with Palo Alto Networks to Accelerate AI-Powered Security Operations for…	Partnership · 1 Oct 2026	1 source · Vendor sources only
Fortinet	Fortinet expands Google Cloud collaboration for AI security	Partnership · 30 Sep 2026	1 source · Vendor sources only
Imperum	Imperum partners with TeamT5 on APAC threat intelligence integration	Partnership · 30 Sep 2026	1 source · Vendor sources only
Intezer	Cyber Fusion Distribution and Intezer partner for UK channel	Partnership · 28 Sep 2026	1 source · Vendor sources only
SentinelOne	SentinelOne partners with NVIDIA on confidential computing for AI governance	Partnership · 28 Sep 2026	1 source · Vendor sources only
AquilaI	Aquila I partners with Virus Rescuers for Middle East cybersecurity	Partnership · 24 Sep 2026	1 source · Vendor sources only
AquilaI	Aquila I partners with Ampcus Cyber for global MSSP services	Partnership · 22 Sep 2026	1 source · Vendor sources only
Rilian	Rilian partners with du for UAE critical infrastructure cybersecurity	Partnership · 16 Sep 2026	1 source · Vendor sources only
Nebulock	Nebulock releases open-source GATES Method framework	Product launch · 28 Sep 2026	4 sources · Vendor sources only
Arctic Wolf	Arctic Wolf launches Aurora Superintelligence Platform and Agentic SOC	Product launch · 14 Oct 2026	2 sources · Vendor sources only
Bricklayer AI	Bricklayer AI launches Agentic Approvals for security action workflows	Product launch · 8 Oct 2026	2 sources · Vendor sources only
Huntbase	Huntbase launches test lake with 1,250+ recorded attacks	Product launch · 8 Oct 2026	2 sources · Vendor sources only
Palo Alto Networks	Palo Alto Networks launches Cortex XCOR AI-driven observability platform	Product launch · 1 Oct 2026	2 sources · Vendor sources only
Splunk	Splunk Observability innovations announced at SplunkConf26	Product launch · 1 Oct 2026	2 sources · Vendor sources only
Google SecOps	Google introduces Gemini 4 Argon frontier intelligence model	Product launch · 30 Sep 2026	2 sources · Vendor sources only
UnderDefense	UnderDefense introduces MAXI MCP security platform	Product launch · 30 Sep 2026	2 sources · Vendor sources only
Huntbase	Huntbase opens self-service access to threat hunting platform	Product launch · 22 Sep 2026	2 sources · Vendor sources only
Bricklayer AI	Bricklayer AI launches agent-native data plane for enterprise AI agents	Product launch · 16 Sep 2026	2 sources · Vendor sources only
Tuskira	Tuskira launched Vector autonomous red team agent for attack surfaces	Product launch · 16 Sep 2026	2 sources · Vendor sources only
Artemis Security	Artemis Security launches Detection as Code feature	Product launch · 15 Oct 2026	1 source · Vendor sources only
Backline AI	Backline launches feature routing remediation tickets to individuals	Product launch · 14 Oct 2026	1 source · Vendor sources only
Elastic	Elastic launches Context Engine, nightshift and AlertZero AI tools	Product launch · 14 Oct 2026	1 source · Vendor sources only
Crogl	Crogl releases version 2.12.1 with faster triage and new connectors	Product launch · 13 Oct 2026	1 source · Vendor sources only
Dropzone AI	Dropzone AI launches hunt packs for parallel threat hunting	Product launch · 13 Oct 2026	1 source · Vendor sources only
Spharaka	Spharaka launches SAGE, a cybersecurity-trained AI model	Product launch · 13 Oct 2026	1 source · Vendor sources only
Torq	Torq launches REV channel partner program for AI SOC	Product launch · 13 Oct 2026	1 source · Vendor sources only
Imperum	Imperum launches Cognitio threat actor intelligence capability	Product launch · 12 Oct 2026	1 source · Vendor sources only
Microsoft	Microsoft puts Azure Maia 200 AI chip into production	Product launch · 12 Oct 2026	1 source · Vendor sources only
Splunk	Splunk ships Enterprise Security 8.7	Product launch · 12 Oct 2026	1 source · Vendor sources only
Rapid7	Rapid7 releases Metasploit Framework 6.5.6	Product launch · 9 Oct 2026	1 source · Vendor sources only
Simbian	Simbian launches AI SIEM to augment existing SIEM infrastructure	Product launch · 7 Oct 2026	1 source · Vendor sources only
Splunk	Splunk launches Agent Observability capabilities for AI agents	Product launch · 6 Oct 2026	1 source · Vendor sources only
Rapid7	Rapid7 launches Rapid7 Intelligence, unified threat intel and vulnerability engine	Product launch · 2 Oct 2026	1 source · Vendor sources only
Cylerian	Cylerian's Cyra agent automates platform tasks via chat	Product launch · 1 Oct 2026	1 source · Vendor sources only
Spharaka	Spharaka launches Sphere On-Premises with local AI reasoning	Product launch · 1 Oct 2026	1 source · Vendor sources only
Splunk	Splunk releases Cloud Platform 10.6 and Enterprise 10.6	Product launch · 1 Oct 2026	1 source · Vendor sources only
Anvilogic	Anvilogic launches Enterprise Security Graph for SOC AI agents	Product launch · 30 Sep 2026	1 source · Vendor sources only
Huntbase	Huntbase launches with 152 hunts, now 207	Product launch · 30 Sep 2026	1 source · Vendor sources only
Mars Security	Mars Security launches Alert Hunts for cross-tool alert investigation	Product launch · 30 Sep 2026	1 source · Vendor sources only
Splunk	Splunk releases AI Assistant v2 with Agent Mode	Product launch · 30 Sep 2026	1 source · Vendor sources only
Beacon Security	Beacon Security integrates with Claude's Compliance API	Product launch · 29 Sep 2026	1 source · Vendor sources only
Cantina	Cantina launches The Brain, shared memory for its agents	Product launch · 29 Sep 2026	1 source · Vendor sources only
IBM	IBM and Yotta launch sovereign agentic AI platform for Indian organizations	Product launch · 29 Sep 2026	1 source · Vendor sources only
SentinelOne	SentinelOne launches Claude Compliance API integration for prompt security	Product launch · 29 Sep 2026	1 source · Vendor sources only
AiStrike	AiStrike launches AiStrike for Insider Threat	Product launch · 28 Sep 2026	1 source · Vendor sources only
VigilBase	VigilBase launches VigilBase Platform for unified tool management	Product launch · 25 Sep 2026	1 source · Vendor sources only
Spectrum Security	Spectrum Security launches Detection Health to find broken rules	Product launch · 22 Sep 2026	1 source · Vendor sources only
Cylerian	Cylerian releases open-source red team attack datasets for SOC testing	Product launch · 17 Sep 2026	1 source · Vendor sources only
D3 Security	D3 Security launches Morpheus 2 with graded evidence and narratives	Product launch · 17 Sep 2026	1 source · Vendor sources only
Imperum	Imperum introduces Virtus Sentinel for AI security	Product launch · 17 Sep 2026	1 source · Vendor sources only
Mars Security	Mars Security launches MARS Playbooks for codified investigations	Product launch · 16 Sep 2026	1 source · Vendor sources only
Mate Security	Mate Security hires Alon Bitton as Head of Finance	Executive appointment · 12 Oct 2026	1 source · Vendor sources only
Kai Security	Kai Security hires Kristi Evans as VP of Revenue Marketing	Executive appointment · 9 Oct 2026	1 source · Vendor sources only
Kai Security	Kai Security hires Thomas N. as VP of Product Marketing	Executive appointment · 18 Sep 2026	1 source · Vendor sources only
Secure.com	Secure.com: headcount grew from 43 to 52	Headcount change · measured 14 Oct 2026	LinkedIn headcount on two dates · Measured, not reported
Elastic	Elastic: headcount shrank from 8508 to 5230	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
Google SecOps	Google SecOps (Google): headcount grew from 297958 to 330447	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
Rapid7	Rapid7: headcount shrank from 6683 to 3313	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
SentinelOne	SentinelOne: headcount shrank from 3642 to 2997	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
Mate Security	Mate Security: headcount shrank from 76 to 68	Headcount change · measured 30 Sep 2026	0 sources · Vendor sources only
BEYON Cyber	BEYON Cyber: headcount grew from 64 to 72	Headcount change · measured 23 Sep 2026	0 sources · Vendor sources only
7AI	7AI: 38 open roles	Hiring · this period	1 source · Vendor sources only
Artemis Security	Artemis Security: 15 open roles	Hiring · this period	1 source · Vendor sources only
BlinkOps	BlinkOps: 9 open roles	Hiring · this period	1 source · Vendor sources only
Crogl	Crogl: 5 open roles	Hiring · this period	1 source · Vendor sources only
Daylight Security	Daylight Security: 12 open roles	Hiring · this period	1 source · Vendor sources only
Dropzone AI	Dropzone AI: 13 open roles	Hiring · this period	1 source · Vendor sources only
Kai Security	Kai Security: 19 open roles	Hiring · this period	1 source · Vendor sources only
Method Security	Method Security: 9 open roles	Hiring · this period	1 source · Vendor sources only
Prophet Security	Prophet Security: 6 open roles	Hiring · this period	1 source · Vendor sources only
Qevlar	Qevlar: 18 open roles	Hiring · this period	1 source · Vendor sources only
Stellar Cyber	Stellar Cyber: 18 open roles	Hiring · this period	1 source · Vendor sources only
Twine Security	Twine Security: 5 open roles	Hiring · this period	1 source · Vendor sources only
Variance	Variance (was Intrinsic): 9 open roles	Hiring · this period	1 source · Vendor sources only
Wraithwatch	Wraithwatch: 6 open roles	Hiring · this period	1 source · Vendor sources only

What this says about the market

Market formation

Most of the market is new: 67 of the 113 vendors with a known founding year were founded in 2023 or later.

Founding year known for 113 of 115 vendors.

Products versus customers

Product news outweighs customer announcements. Of 99 developments, 62 were product launches or expansions, 20 partnerships and 10 customer or deployment announcements.

Concentration

Activity is concentrated in the three best-funded vendors hold 52% of disclosed funding. Elsewhere it is spread: the three vendors hiring most hold 37% of 205 open roles (7AI alone 19%); the three most active accounts published 11% of 1135 vendor posts; three vendors account for 37% of 99 developments.

Job listings exist for 23 of 115 vendors; funding is disclosed for 53 of 115.

Developments

RSS16 September–16 October 2026

2,565 records collected → 120 developments

Funding

StrikeReady raises funding led by Wa'ed Ventures

Total funding reaches $29M with Hitachi Ventures, 33N, Monta Vista and Wa'ed participating.

StrikeReady · 16 Sep 2026 · 2 sources · Also reported independently

More: the company's LinkedIn post

Social: @thedatatechtimes.bsky.social on Bluesky

Product expansion

Stellar Cyber releases 7.0 with AI case triage and APIs

Stellar Cyber 7.0 unifies AI-powered case triage, SOC workflows, investigative evidence, automated response and new APIs.

Stellar Cyber · 5 Oct 2026 · 5 sources · Reported by multiple independent sources

More: helpnetsecurity.com, the company's LinkedIn post

Social: @hacker.at.thenote.app on Bluesky, @shah_sheikh on X, @blackhatnews.tokyo on Bluesky

Acquisition

Leidos Security Enterprise Solutions and Analogic close acquisition deal

New U.S.-based company combines capabilities to strengthen global security screening.

Leidos · 5 Oct 2026 · 1 source · Vendor sources only

Vendor	Disclosed total	Last round
Arctic Wolf	$900M	Convertible Note
Torq	$332M	Series D
7AI	$202M	Series A
Exaforce	$201M	Series B
BlinkOps	$90M	Series B
Anvilogic	$85M	Series C
Artemis Security	$70M	—
Intezer	$60M	Series C
Dropzone AI	$57M	Corporate Round
Mate Security	$50M	—

AWS & Crowdstrike Cybersecurity Accelerator	Arcanna.ai, Backline AI, Bricklayer AI, Sevii, Simbian
Accel	CrowdStrike, Legion Security, Prophet Security
Bain Capital Ventures	Nebulock, Prophet Security, Rapid7
Evolution Equity Partners	Anvilogic, Backline AI, Torq
Icon Ventures	Exabeam, Palo Alto Networks, Simbian
Lightspeed Venture Partners	Arctic Wolf, BlinkOps, Exabeam
Andreessen Horowitz	Command Zero, Method Security
Blue Owl Capital Corporation	Arctic Wolf, Exabeam
Cisco Investments	Binalyze, Exabeam
Citi Ventures	Binalyze, Prophet Security
Decibel Partners	Dropzone AI, Nebulock
Dreamit Ventures	AiStrike, Bricklayer AI
Employee Stock Option Fund	CrowdStrike, Exabeam
Frederic Kerrest	Detections AI (was System Two Security), Method Security
General Catalyst	Andesite, Method Security
Greylock	7AI, Palo Alto Networks
Insight Partners	Command Zero, Torq
Intel Capital	Intezer, Tuskira
IQT	Dropzone AI, Nebulock
Kleiner Perkins	Google SecOps (Google), Mandiant (Google)
Norwest	Exabeam, Intezer
Notable Capital	Beacon Security, Torq
Ofir Ehrlich	BlinkOps, Daylight Security
Rain Capital	Simbian, Tuskira
Redpoint	Arctic Wolf, Fortinet

Secure.com	+20.9%	43 → 52
Mate Security	+8.8%	68 → 74
Kai Security	+7.4%	81 → 87
Dropzone AI	+7.2%	83 → 89
Andesite	-6.6%	61 → 57
BEYON Cyber	+5.6%	72 → 76

Vendor	Posts	Reactions/post	Mentions by others
Kai Security	45	23.3	0
7AI	42	27.5	15
Arctic Wolf	41	21.7	9
Strike48 (A Devo company)	38	15.1	7
CrowdStrike	37	116.3	2
Splunk (Cisco)	28	37.3	85
Torq	28	63.2	14
Eventus Security	23	14.7	6
ServiceNow	22	175.5	0
Google SecOps (Google)	21	942.9	11
Exaforce	20	26.6	15
Palo Alto Networks	20	292.8	5
HawkEye	20	36.4	0
Wirespeed	20	5.5	0
Elastic	19	128.0	7
Leidos	19	105.2	4
D3 Security	19	14.6	0
Mate Security	18	121.4	13
Rapid7	18	87.5	0
Secure.com	17	8.4	0

Account	Who	Platform	Posts	Reactions	Latest post
@anton_chuvakin	Vendor staff (Cisco Secure) · Dr. Anton Chuvakin · 41,897 followers Dr. Anton Chuvakin is a veteran cybersecurity expert specializing in SIEM, DFIR, EDR, and AI security. He currently works at Cisco Secure and previously held…	twitter	28	616	2026-10-14
@opsmatters.com	OpsMatters · 407 followers OpsMatters is a content platform and publication covering modern operations, technology, and cybersecurity topics. They aggregate and publish curated articles…	bluesky	10	2	2026-10-15
@arc-codex.com	Ross Nesbitt · 553 followers Ross Nesbitt is a webmaster and cloud enthusiast who shares and critiques diverse online articles and research across security, science, and technology topics.…	bluesky	9	3	2026-10-13
@torq_io	Vendor (Torq) · Torq · 1,967 followers Torq is an AI-powered SOC platform company that automates threat triage, investigation, and response for enterprises. Their official account promotes their…	twitter	8	13	2026-10-09
@exabeam	Vendor (Exabeam) · Exabeam · 5,398 followers Exabeam is a vendor providing behavior intelligence and AI-powered security analytics solutions for enterprise security operations. They position themselves as…	twitter	6	1	2026-10-07
@CIOInfluence	CIO Influence · 426 followers CIO Influence is a technology news and analysis publication covering IT leadership, Big Data, and emerging technologies. They publish news about AI in security…	twitter	6	0	2026-10-14
@theXSSrat	The XSS Rat - Proud XSS N00b :-) · 168,370 followers The XSS Rat is a bug bounty hunter and cybersecurity educator who teaches offensive security methodologies, CTF (Capture The Flag) training, and practical…	twitter	5	37	2026-10-01
@_cybersecurity_	_cybersecurity_ A cybersecurity-focused account that analyzes trends, tools, and threats in the security operations center (SOC) space, including AI-driven security platforms…	reddit	5	14	2026-10-13
@_c0c0n_	c0c0n2026 · 3,184 followers c0c0n is a community-driven 8-day hacking and cybersecurity conference held annually since 2008, hosting the 19th edition in October 2026 in Kochi, Kerala. The…	twitter	5	12	2026-10-13
@AWNetworks	Vendor (Arctic Wolf) · Arctic Wolf · 4,618 followers Arctic Wolf is a cybersecurity vendor offering managed detection and response (MDR) and security operations center (SOC) services, with a focus on AI-driven…	twitter	5	10	2026-10-14
@cognna	Vendor (Cognna) · COGNNA · 726 followers COGNNA is a cybersecurity vendor offering AI-driven security operations and threat detection solutions. They focus on enterprise security, compliance, identity…	twitter	5	3	2026-10-13
@hacker.at.thenote.app	Hacker & Security News · 1,209 followers A news aggregation and curation account that republishes cybersecurity, hacking, and tech news from sources like Hacker News, LifeHacker, and Security…	bluesky	5	3	2026-10-14
@cl0qsearch.bsky.social	Vendor (cl0q) · cl0q · 61 followers cl0q is an open search engine for domain research and OSINT with 38.5M domains indexed, focused on security research infrastructure. The account owner posts…	bluesky	5	0	2026-10-01
@splunk	Vendor (Splunk) · Splunk · 78,162 followers Splunk is the official account for Splunk, a unified security and observability platform vendor. They post about their products, features, partnerships, and…	twitter	4	62	2026-10-02
@I_vishnu_nair	Vendor staff (Spharaka Networks) · Vishnu Nair · 400 followers Vishnu Nair is a founding member of Spharaka Networks and co-founder of Capsquare Technologies, focused on building SAGE, India's cybersecurity-focused AI…	twitter	4	11	2026-10-14
@techintelpro	TechIntelPro · 23 followers TechIntelPro is a technology content platform that publishes news and analysis about enterprise technology trends, cybersecurity, and AI. They create…	twitter	4	4	2026-10-14
@cloudgooru.bsky.social	Rebecca Whitmore · 43 followers Rebecca Whitmore is a software and AI analyst who tracks enterprise software vendors' pivots to AI-driven, inference-metered business models. She publishes…	bluesky	4	0	2026-10-04
@ryanfalk	Vendor staff (Cisco) · Ryan Falk · 763 followers Ryan Falk is a channel building professional at Cisco focused on AI, security, and infrastructure solutions. He posts about AI in security operations, Cisco…	twitter	4	0	2026-10-12
@blackhatnews.tokyo	blackhatnews.tokyo · 90 followers A Japanese-language security news aggregator that translates and reports on overseas cybersecurity developments, with particular focus on AI-enabled security…	bluesky	4	0	2026-10-13
@nabe_w999	渡部勝也 · 776 followers Japanese-language account that collects and shares information on business, psychology, and parenting, with a focus on AI and SOC technologies. Posts primarily…	twitter	4	0	2026-10-13

Vendor	Status	Country	Founded	LinkedIn headcount	Disclosed funding	Developments, 30d	Open roles	Latest development
Artemis Security	Changed	United States	2025	62	$70M	3	15	2026-10-15
Arctic Wolf	Changed	United States	2012	3300	$900M	4	0	2026-10-14
Backline AI	Changed	United States	2024	25	$9M	1	0	2026-10-14
Elastic	Changed	United States	2012	5230	Undisclosed	4	0	2026-10-14
Qevlar	Changed	France	2023	89	$45M	2	18	2026-10-14
Rapid7	Changed	United States	2000	3313	Undisclosed	3	0	2026-10-14
SentinelOne	Changed	United States	2013	2997	Undisclosed	4	0	2026-10-14
Trellix	Changed	United States	2022	30	Undisclosed	1	0	2026-10-14
7AI	Changed	United States	2024	178	$202M	3	39	2026-10-13
Crogl	Changed	United States	2023	41	$30M	2	5	2026-10-13
Dropzone AI	Changed	United States	2023	89	$57M	2	13	2026-10-13
IBM	Changed	United States	1911	344894	Undisclosed	2	0	2026-10-13
Palo Alto Networks	Changed	United States	2005	23805	Undisclosed	3	0	2026-10-13
Spharaka	Changed	India	2025	15	Undisclosed	2	0	2026-10-13
Torq	Changed	United States	2020	473	$332M	3	0	2026-10-13
Cotool	Changed	United States	2025	9	$7M	1	0	2026-10-12
Imperum	Changed	Netherlands	2021	22	Bootstrapped	3	0	2026-10-12
Mate Security	Changed	Israel	2025	74	$50M	2	0	2026-10-12
Microsoft	Changed	United States	1975	231136	Undisclosed	2	0	2026-10-12
Camelot Secure	Changed	United States	2022	31	Undisclosed	1	0	2026-10-09
Kai Security	Changed	United States	2025	87	Undisclosed	3	19	2026-10-09
Bricklayer AI	Changed	United States	2023	41	$8M	2	0	2026-10-08
Fortinet	Changed	United States	2000	16739	Undisclosed	2	0	2026-10-08
Huntbase	Changed	United Kingdom	2024	6	$1M	3	0	2026-10-08
Prophet Security	Changed	United States	2024	94	$41M	3	6	2026-10-08
Stellar Cyber	Changed	United States	2015	147	$46M	4	18	2026-10-08
ServiceNow	Changed	United States	2004	34845	Undisclosed	1	0	2026-10-07
Simbian	Changed	United States	2023	67	$10M	1	0	2026-10-07
CrowdStrike	Changed	United States	2011	11981	Undisclosed	3	0	2026-10-06
NextSOC	Changed	—	2026	2-10 employees	Undisclosed	1	0	2026-10-06
Twine Security	Changed	Israel	2024	50	$12M	2	5	2026-10-06
Leidos	Changed	United States	1969	37343	Undisclosed	1	0	2026-10-05
AquilaI	Changed	India	2020	104	Bootstrapped	3	0	2026-10-03
Intezer	Changed	United States	2016	89	$60M	2	0	2026-10-02
Cylerian	Changed	United States	2018	24	Undisclosed	2	0	2026-10-01
Exabeam	Changed	United States	2013	773	Undisclosed	2	0	2026-10-01
Anvilogic	Changed	United States	2019	109	$85M	1	1	2026-09-30
Mars Security	Changed	United States	2025	24	Undisclosed	2	1	2026-09-30
UnderDefense	Changed	United States	2017	134	Undisclosed	1	0	2026-09-30
Beacon Security	Changed	Israel	2024	25	$13M	1	0	2026-09-29
Cantina	Changed	United States	2023	312	$16M	1	0	2026-09-29
AiStrike	Changed	United States	2023	54	$7M	1	0	2026-09-28
Nebulock	Changed	United States	2023	60	$6M	2	4	2026-09-28
Spectrum Security	Changed	United States	2025	19	Undisclosed	2	0	2026-09-25
VigilBase	Changed	United Arab Emirates	2025	3	Undisclosed	1	0	2026-09-25
BlinkOps	Changed	United States	2021	130	$90M	2	9	2026-09-23
Exaforce	Changed	United States	2023	144	$201M	2	0	2026-09-23
D3 Security	Changed	Canada	2012	156	$10M	1	3	2026-09-17
Rilian	Changed	United States	2024	35	Undisclosed	1	0	2026-09-16
StrikeReady	Changed	United States	2019	74	$12M	1	0	2026-09-16
Tuskira	Changed	United States	2024	48	$28M	1	0	2026-09-16
Google SecOps (Google)	Changed	United States	1998	330447	Undisclosed	0	0	—
Splunk (Cisco)	Changed	United States	2003	8422	Undisclosed	0	0	—
Strike48 (A Devo company)	Changed	United States	2026	63	Undisclosed	0	0	—
Secure.com	No change	United Arab Emirates	2024	52	$4M	1	0	2026-10-14
AISOC	No change	United Kingdom	2024	1	Undisclosed	0	0	—
Andesite	No change	United States	2023	57	$38M	0	4	—
Arambh Labs	No change	United States	2024	10	Undisclosed	0	0	—
Arcanna.ai	No change	United States	2019	24	$5M	0	0	—
CipherData	No change	United States	2023	11	Undisclosed	0	0	—
Cognna	No change	Saudi Arabia	2022	70	$11M	0	4	—
Command Zero	No change	United States	2021	40	$45M	0	0	—
Conifers AI	No change	United States	2024	44	$25M	0	3	—
CounterShadow	No change	United Kingdom	2024	8	Undisclosed	0	0	—
Daylight Security	No change	Israel	2024	80	$40M	1	12	—
DeepTempo	No change	United States	2023	26	Undisclosed	0	0	—
Detections AI (was System Two Security)	No change	United States	2023	17	$7M	0	0	—
Elezar	No change	Australia	2024	4	Undisclosed	0	0	—
Embed Security	No change	United States	2024	16	$6M	0	0	—
Eventus Security	No change	Singapore	2017	289	Undisclosed	0	0	—
Fig Security	No change	United States	2025	47	$38M	0	0	—
FlintX	No change	United States	2025	8	Undisclosed	0	0	—
HarkX	No change	India	2026	6	Undisclosed	0	0	—
HawkEye	No change	United Arab Emirates	2011	116	Undisclosed	0	0	—
HoundBytes	No change	Romania	2022	13	Undisclosed	0	0	—
Joon	No change	Israel	2025	25	Undisclosed	0	0	—
Legion Security	No change	United States	2024	78	$38M	0	0	—
Louie AI	No change	United States	2014	9	Undisclosed	0	0	—
Method Security	No change	United States	2023	31	$26M	1	9	—
Miru Labs	No change	United States	2024	10	$3M	0	0	—
Nua	No change	Saudi Arabia	2021	30	Undisclosed	0	0	—
Opnova	No change	United States	2024	21	$4M	0	0	—
PRE Security	No change	United States	2023	30	$7M	0	0	—
Priam Cyber AI	No change	United Kingdom	2019	12	$3M	0	0	—
RedCarbon	No change	Italy	2020	22	$3M	0	0	—
Redblock	No change	United States	2023	16	Undisclosed	0	1	—
SOC Jedi.ai	No change	United States	2024	5	Undisclosed	0	0	—
SecsphereSOC	No change	India	2003	18	Undisclosed	0	0	—
Seculyze	No change	DK	—	10	Undisclosed	0	0	—
Securaa	No change	United States	—	57	Undisclosed	0	0	—
Sevii	No change	United States	2024	27	Undisclosed	0	0	—
Sleuth Kit Labs	No change	United States	2023	11	Bootstrapped	0	0	—
Spacewalk AI	No change	United States	2024	14	Undisclosed	0	0	—
TandemTrace	No change	Spain	2024	9	Undisclosed	0	0	—
TechBridge Consultancy Services	No change	India	2016	118	Undisclosed	0	0	—
Tenacium	No change	United Kingdom	2021	25	Undisclosed	0	0	—
Threatlens	No change	United States	2023	7	Undisclosed	0	0	—
Tier4ai	No change	United States	2024	10	Undisclosed	0	0	—
Tracecat	No change	United States	2024	8	$2M	0	0	—
Variance (was Intrinsic)	No change	United States	2022	20	$26M	0	9	—
Vinci Logic	No change	France	2025	2-10 employees	Undisclosed	0	0	—
VisionHeight	No change	United States	2025	9	Undisclosed	0	0	—
WiseBee	No change	United States	2025	15	$2M	0	0	—
Wraithwatch	No change	United States	2023	16	$8M	1	6	—
guarddog	No change	United States	2019	20	$3M	0	0	—
BEYON Cyber	Incomplete	Bahrain	2022	76	Undisclosed	1	0	2026-09-23
Almanax	Incomplete	United States	2024	2	$2M	0	0	—
Alpha Level	Incomplete	United States	2023	9	$1M	0	0	—
Binalyze	Incomplete	Estonia	2018	99	$30M	0	2	—
HTCD	Incomplete	United States	2023	11	Undisclosed	0	0	—
Mandiant (Google)	Incomplete	United States	2004	1492	Undisclosed	0	0	—
Mave	Incomplete	Israel	2025	23	Undisclosed	0	0	—
SOCAI	Incomplete	Spain	—	—	Undisclosed	0	0	—
SOCNova	Incomplete	Turkey	2026	7	Undisclosed	0	0	—
Tencyle	Incomplete	Israel	2023	15	Undisclosed	0	0	—
Wirespeed	—	United States	—	5	Undisclosed	1	0	2026-09-17
Radiant Security	—	United States	2021	39	$15M	0	0	—

Source	State	Eligible	Configured	Attempted	Collected	Notes
Company posts (LinkedIn)	checked	116 / 115	116	116	116
Company profiles and headcount (LinkedIn)	checked	116 / 115	116	116	116
Job listings (LinkedIn)	some vendors checked	116 / 115	116	115	115	we checked 115 of the 116 vendors we have a way to look up
Funding stages, investors and scores (Crunchbase)	some vendors checked	113 / 115	113	112	112	we checked 112 of the 113 vendors we have a way to look up
Vendor site updates (vendor website / RSS)	some vendors checked	117 / 115	117	87	87	we checked 87 of the 117 vendors we have a way to look up
Finding a vendor's feed (vendor website)	checked	117 / 115	117	117	117
Job listings (the company's own hiring system)	checked	17 / 115	17	17	17
Finding a vendor's hiring system (vendor website)	checked	117 / 115	117	117	117

Coverage	Vendors	%
Being watched	115 / 115	100%
We have seen something from	115 / 115	100%
Posting on LinkedIn in the period	114 / 117	97%
Crunchbase profile read	89 / 113	79%
Have public job listings	23 / 115	20%

What	Published on	We get it from	Whose words
Company posts	LinkedIn	Bright Data	vendor-owned
Company profiles and headcount	LinkedIn	Bright Data	vendor profile
Job listings	LinkedIn	Bright Data	vendor-associated
Job listings (experimental)	Indeed	Bright Data	vendor-associated; we have not yet checked that every listing is the vendor's own
Practitioner discussion	X (Twitter), Reddit, TikTok and Instagram	Xpoz	third-party (earned)
Practitioner discussion	Bluesky	Bluesky (direct)	third-party (earned)
Employee reviews	Glassdoor	OpenWebNinja	third-party (current and former staff)
News	the publication itself	configured news/RSS feeds	third-party (earned)
Vendor site updates	vendor website / RSS	site and RSS collector	vendor-owned
Job listings	the company's own hiring system	the hiring system's public job board API	vendor-associated
Finding a vendor's hiring system	vendor website	site collector	vendor-owned
Finding a vendor's feed	vendor website	site and RSS collector	vendor-owned
Funding and ownership	PitchBook	Bright Data	third-party company data
Company profile and contacts	ZoomInfo	Bright Data	third-party company data
Funding stages, investors and scores	Crunchbase	Bright Data	third-party company data
Disclosed funding totals	imported workbook	operator import	third-party company data

AI in the SOC Market Maturity Map

Executing (14) — the largest vendors: scale of 75 and over

Scaling (29) — scale from 50 to 75

Building (36) — scale from 25 to 50

Emerging (18) — the smallest vendors: scale under 25

Accelerating (16) — momentum of 67 and over

Growing (62) — momentum from 33 to 67

Holding (19) — momentum under 33

Innovating (33) — top third by launches, corroborated launches, research posts and engineering hiring; a marker across every tier

Hiring (7) — top third by open roles per 100 staff, with at least 3 roles open; a marker across every tier

Raised in the last year (27) — a round dated inside the last 365 days, from the vendor's own post, a matched news event or the Crunchbase news list

Acquired (3) — on the record, not on the map

Pivoted (1) — left this market for another; on the record, not on the map

Large incumbents (17) — in this market, but too large to compare on size; listed, not on the map

Executive assessment

2 acquisitions among the vendors we track.

New funding for StrikeReady, Prophet Security.

Customer announcements from CrowdStrike, Nebulock, Qevlar, 7AI and 6 more.

54 of 115 vendors had a development.

Weekly briefing

AI in the SOC — Week of 2026-09-14

Vendors with a development

What this says about the market

Market formation

Products versus customers

Concentration

Developments

StrikeReady raises funding led by Wa'ed Ventures

Stellar Cyber releases 7.0 with AI case triage and APIs

Leidos Security Enterprise Solutions and Analogic close acquisition deal

Coalition acquired Wirespeed for millisecond threat response capability

Prophet Security raises strategic investment from Amex and Citi Ventures

Strike48 launches on-prem agentic SOC appliance for air-gapped deployments

Intezer revenue triples as enterprise AI security expands

SentinelOne extends Wayfinder coverage across endpoints, identities, and cloud workloads

Inside CrowdStrike’s Move To Secure Enterprise Agentic AI

Exabeam releases October 2026 New-Scale platform update

Trellix Redefines Cyber Defense for the AI Era

Artemis Security launches Orion-1 frontier model for cyber defense

Elastic’s AlertZero puts AI agents to work on security alert overload

Arctic Wolf launches SwarmView for AI investigation visibility

Exabeam adds Agentic SOC capabilities to New-Scale platform

Splunk introduces new Agentic SOC capabilities at SplunkConf26

Microsoft launches reimagined Copilot with Home, Code and Autopilot capabilities

Solarig standardizes on CrowdStrike Falcon platform for security

Global software company uses Nebulock for insider risk program

Vancord chooses Qevlar AI over building investigation tool in-house

Cole, Scott & Kissane uses 7AI to cut investigation time

Oldcastle APG uses Palo Alto Networks Prisma SASE and ADEM

EQUANS CISO describes AI-enhanced SOC built with Torq

LTM deploys 1,500 ServiceNow AI agents alongside staff

Capgemini Brazil uses Stellar Cyber for AI-driven cyberthreat response

Tronox uses Strike48 agents for SOC automation

SEP2 doubles detection rule coverage with Spectrum Security

Cotool adds Opus 5.5, GPT-6 Sol, GPT-6 Luna to model catalog

Elastic launches nightshift AI SRE in private preview

NextSOC launches agentic security operations platform

Arctic Wolf adds 13 new integrations to Aurora Superintelligence Platform

BlinkOps integrates with Microsoft Sentinel Data Lake

Exaforce introduced Agentless AI Security for AI agent visibility and control

Arctic Wolf partners with Veeam on backup infrastructure security

Exaforce partners with KDDI America and KDDI Europe

IBM and MeitY Startup Hub sign MoU for India startups

Camelot Secure partners with Baltimore Ravens on cybersecurity

Torq and Upwind Security launch native integration

Fortinet partners with IBM Cloud for FortiGate VM NGFW

Prophet Security partners with ExtraHop to integrate NDR data

Stellar Cyber integrates with Check Point for alert correlation

7AI integrates with Upwind Security

CrowdStrike partners with CyberCert for ANZ SMB market

Twine Security integrates with Cyera for data risk remediation

Aquila I goes live with Starburst for security data management

Cyderes Partners with Palo Alto Networks to Accelerate AI-Powered Security Operations for Global Enterprises

Fortinet expands Google Cloud collaboration for AI security

Imperum partners with TeamT5 on APAC threat intelligence integration

Cyber Fusion Distribution and Intezer partner for UK channel

SentinelOne partners with NVIDIA on confidential computing for AI governance

Aquila I partners with Virus Rescuers for Middle East cybersecurity

Aquila I partners with Ampcus Cyber for global MSSP services

Rilian partners with du for UAE critical infrastructure cybersecurity