Week of 5–11 Oct · ranked by momentum on the Market Maturity Map: headcount change, hiring, launches and partnerships, earned mentions and the vendor's own posts over 90 days.
VendorLast wkPeakTrend, 6 wksMomentum
1▲ 17AI4th week at #1 · Executing · Accelerating17 earned mentions, 24 open roles per 100 staff, raised Series A, Aug 2026Last week 2 · Peak 1 · Momentum 852185
2▲ 4Detections AI (was System Two Security)Building · AcceleratingHeadcount +167%, 8 launches and partnershipsLast week 6 · Peak 2 · Momentum 846284
Trellix launched Trellix Wise for Private Cloud, the first on-premises federated AI core for security operations centers, designed to deliver machine-speed cyber defense for data-sensitive environments.
Trellix launched Trellix Wise™ for Private Cloud, the first on-premises federated AI core for security operations centers, designed to deliver…
Trellix · 14 Oct 2026 · 4 sources · Reported by multiple independent sources
Live on 4 November 2026 at 9:00 PST. Karthik Kannan and Oliver Rochford discuss the decoupled SIEM and why it matters as AI agents take on more security operations work. They cover how to give agents governed, auditable access to data and tools spread across SIEMs, data lakes and cloud platforms, while analysts keep control of the decisions that matter.
Karthik Kannan, Anvilogic, and Oliver Rochford, Cyberfuturists · Sponsored by Anvilogic · Register for the webinar →
MDR providers want to take investigations further before handing them off, and incident response providers want recurring work between major incidents. Both are moving towards the same service: continuous investigation built on evidence from the affected systems. The piece looks at what that means for service providers, and where the formal incident response boundary still matters.
Oliver Rochford, Cyberfuturists · Sponsored by Binalyze · Read the article →
Security data is spread across platforms, and consolidating it all into one SIEM is slow and expensive. A decoupled architecture gives AI agents governed, auditable access to the data and tools a SOC already runs, so they can take on recurring workflows across them. The paper sets out the decoupling models and what each means for cost, governance and portability.
StrikeReady raised a new round led by Wa'ed Ventures on 16 September. StrikeReady says it has raised $29M in total. Prophet Security raised a strategic round; the amount is not stated on 8 October.
99 developments in 30 days, plus 21 hiring or headcount signals. The 11 vendors with 3 or more developments account for 37% of them (Splunk 6, Arctic Wolf 4, AquilaI 3, CrowdStrike 3, Elastic 3, and 6 more). 51 vendors were watched and had none. 10 are not fully collected yet.
Splunk: 6 developments
Arctic Wolf: 4 developments
AquilaI: 3 developments
CrowdStrike: 3 developments
Elastic: 3 developments
Analysis
Analysis and notes written by the Cyberfuturists team.
CrowdStrike used Fal.Con this week to make the agentic SOC a feature of Falcon. Nine months earlier, in December 2025, 7AI raised a 130 million dollar Series A, the largest Series A in the AI SOC market. The platforms are absorbing the category while…
Sumo Logic adds AI tools to cut telemetry costs upstream
Sumo Logic has introduced AI-powered tools designed to reduce telemetry data ingestion costs by filtering information upstream before it reaches analytics platforms.
Sumo Logic · 2 Oct 2026 · 1 source · Also reported independently
Trellix launched Trellix Wise for Private Cloud, the first on-premises federated AI core for security operations centers, designed to deliver machine-speed cyber defense for data-sensitive environments.
Trellix · 14 Oct 2026 · 4 sources · Reported by multiple independent sources
7AI
Detections AI (was System Two Security)
Exaforce
Nebulock
Secure.com
Daylight Security
Prophet Security
Dropzone AI
Kai Security
Artemis Security
Tuskira
Method Security
Anvilogic
Crogl
Stellar Cyber
Mate Security
Spharaka
Bricklayer AI
Qevlar
Legion Security
Fig Security
Cognna
Twine Security
Huntbase
VigilBase
Cantina
Rilian
Cylerian
D3 Security
Mars Security
Simbian
Binalyze
Strike48 (A Devo company)
Cotool
Command Zero
BlinkOps
Sevii
Wraithwatch
Threatlens
Trellix · 14 Oct 2026 · 4 sources · Reported by multiple independent sources
IBM
Arctic Wolf
Camelot Secure
Palo Alto Networks
ServiceNow (Leader)
Elastic (Leader)
Rapid7