Market News and Trends for AI in the SOC
Week of 12–18 Oct · ranked by momentum on the Market Maturity Map: headcount change, hiring, launches and partnerships, earned mentions and the vendor's own posts over 90 days.
7AI23 earned mentions, 21 open roles per 100 staff, raised Series A, Aug 2026Last week 1 · Peak 1 · Momentum 851185
Detections AI (was System Two Security)Headcount +183%, 16 earned mentionsLast week 2 · Peak 2 · Momentum 842284
Exaforce15 launches and partnerships, 22 earned mentionsLast week 3 · Peak 1 · Momentum 833183
Prophet Security7 launches and partnerships, 8 earned mentionsLast week 7 · Peak 4 · Momentum 797479
Secure.comHeadcount +53%, 5 launches and partnershipsLast week 5 · Peak 3 · Momentum 795379
Daylight Security15 open roles per 100 staff, headcount +14%Last week 6 · Peak 4 · Momentum 796479
Nebulock9 launches and partnerships, headcount +28%Last week 4 · Peak 4 · Momentum 794479
Dropzone AI15 open roles per 100 staff, 10 earned mentionsLast week 8 · Peak 8 · Momentum 788878
Artemis Security24 open roles per 100 staff, 12 earned mentionsLast week 10 · Peak 4 · Momentum 7810478
Kai Security22 open roles per 100 staff, headcount +28%Last week 9 · Peak 3 · Momentum 769376
Bricklayer AI15 launches and partnershipsLast week 18 · Peak 11 · Momentum 74181174
Cognna6 earned mentions, 3 open roles per 100 staffLast week 22 · Peak 12 · Momentum 73221273
Mate Security40 earned mentions, headcount +12%, raised Seed, Jul 2026Last week 16 · Peak 3 · Momentum 7216372
Method Security29 open roles per 100 staff, headcount +19%Last week 12 · Peak 12 · Momentum 71121271
Spharaka13 earned mentions, 4 launches and partnershipsLast week 17 · Peak 15 · Momentum 70171570
Stellar Cyber13 earned mentions, 12 open roles per 100 staffLast week 15 · Peak 15 · Momentum 67151567
Tuskira8 launches and partnerships, 6 earned mentionsLast week 11 · Peak 11 · Momentum 66111166
Crogl12 open roles per 100 staff, 7 earned mentionsLast week 14 · Peak 2 · Momentum 6614266
Qevlar20 open roles per 100 staff, 5 earned mentionsLast week 19 · Peak 16 · Momentum 65191665
Twine SecurityHeadcount +19%, 10 open roles per 100 staffLast week 23 · Peak 20 · Momentum 64232064
Legion Security5 earned mentionsLast week 20 · Peak 14 · Momentum 64201464
Anvilogic11 launches and partnerships, 1 open role per 100 staffLast week 13 · Peak 10 · Momentum 64131064
Binalyze8 launches and partnerships, 2 open roles per 100 staffLast week 32 · Peak 23 · Momentum 64322364
HuntbaseHeadcount +50%, 6 launches and partnershipsLast week 24 · Peak 24 · Momentum 62242462
ThreatlensHeadcount +17%Last week 40 · Peak 17 · Momentum 62401762
VigilBaseHeadcount +50%Last week 25 · Peak 12 · Momentum 61251261
Fig Security5 launches and partnershipsLast week 21 · Peak 12 · Momentum 60211260
CantinaLast week 26 · Peak 26 · Momentum 60262660
Mars Security4 open roles per 100 staff, 4 launches and partnershipsLast week 30 · Peak 23 · Momentum 60302360
Rilian4 launches and partnershipsLast week 27 · Peak 13 · Momentum 60271360
Cylerian6 launches and partnershipsLast week 28 · Peak 20 · Momentum 58282058
Cotool8 launches and partnerships, 5 earned mentionsLast week 35 · Peak 32 · Momentum 58353258
Intezer16 earned mentions, 7 launches and partnershipsLast week – · Peak 26 · Momentum 55–2655
Wraithwatch38 open roles per 100 staffLast week 39 · Peak 24 · Momentum 55392455
SeviiLast week 38 · Peak 31 · Momentum 55383155
UnderDefenseLast week – · Peak 36 · Momentum 53–3653
Spectrum SecurityLast week – · Peak 35 · Momentum 53–3553
AquilaILast week – · Peak 38 · Momentum 53–3853
Camelot Secure4 launches and partnershipsLast week – · Peak 32 · Momentum 53–3253
Eventus Security7 earned mentionsLast week – · Peak 40 · Momentum 52–4052Week of 12–18 Oct · ranked by momentum on the Market Maturity Map: headcount change, hiring, launches and partnerships, earned mentions and the vendor's own posts over 90 days.
Exaforce14 launches and partnerships, 30 earned mentionsLast week – · Peak 1 · Momentum 86–186Artemis Security24 open roles per 100 staff, headcount +12%Last week – · Peak 2 · Momentum 82–282
Google SecOps (Google)19 earned mentions, headcount +11%Last week – · Peak 3 · Momentum 81–381Detections AI (was System Two Security)Headcount +30%, 17 earned mentionsLast week – · Peak 4 · Momentum 80–480Prophet Security5 launches and partnerships, 5 open roles per 100 staffLast week – · Peak 5 · Momentum 80–580Daylight Security15 open roles per 100 staff, headcount +10%Last week – · Peak 6 · Momentum 80–680NebulockHeadcount +25%, 10 launches and partnershipsLast week – · Peak 7 · Momentum 79–7797AI26 earned mentions, headcount +19%, raised Series A, Aug 2026Last week – · Peak 8 · Momentum 79–879Bricklayer AI13 launches and partnerships, headcount +8%Last week – · Peak 9 · Momentum 76–976Dropzone AIHeadcount +15%, 13 open roles per 100 staffLast week – · Peak 10 · Momentum 75–1075Kai SecurityHeadcount +23%, 22 open roles per 100 staffLast week – · Peak 11 · Momentum 74–1174Method Security29 open roles per 100 staff, headcount +19%Last week – · Peak 12 · Momentum 74–1274CognnaHeadcount +10%, 3 open roles per 100 staffLast week – · Peak 13 · Momentum 73–1373Mate Security41 earned mentions, headcount +10%, raised Seed, Jul 2026Last week – · Peak 14 · Momentum 72–1472Spharaka10 earned mentions, 4 launches and partnershipsLast week – · Peak 15 · Momentum 72–1572Crogl10 open roles per 100 staff, 7 earned mentionsLast week – · Peak 16 · Momentum 70–1670Stellar Cyber12 open roles per 100 staff, 14 earned mentionsLast week – · Peak 17 · Momentum 69–1769Qevlar24 open roles per 100 staff, headcount +11%Last week – · Peak 18 · Momentum 68–1868
Palo Alto Networks5 launches and partnerships, 5 earned mentions, raised Series C, Oct 2026Last week – · Peak 19 · Momentum 68–1968Tuskira8 launches and partnerships, 6 earned mentionsLast week – · Peak 20 · Momentum 68–2068Binalyze9 launches and partnerships, 2 open roles per 100 staffLast week – · Peak 21 · Momentum 67–2167Twine SecurityHeadcount +18%, 10 open roles per 100 staffLast week – · Peak 22 · Momentum 67–2267Legion SecurityHeadcount +8%, 5 earned mentionsLast week – · Peak 23 · Momentum 66–2366Cantina4 launches and partnershipsLast week – · Peak 24 · Momentum 65–2465
BlinkOps7 open roles per 100 staffLast week – · Peak 25 · Momentum 65–2565Mars Security5 launches and partnerships, 4 open roles per 100 staffLast week – · Peak 26 · Momentum 64–2664
CrowdStrike18 launches and partnerships, 6 earned mentionsLast week – · Peak 27 · Momentum 63–2763Secure.comHeadcount +46%Last week – · Peak 28 · Momentum 62–2862Anvilogic9 launches and partnerships, 1 open role per 100 staffLast week – · Peak 29 · Momentum 62–2962
Arctic Wolf14 launches and partnerships, 13 earned mentionsLast week – · Peak 30 · Momentum 62–3062Cylerian4 launches and partnershipsLast week – · Peak 31 · Momentum 60–3160
FortinetLast week – · Peak 32 · Momentum 60–3260
Exabeam42 earned mentions, 8 launches and partnershipsLast week – · Peak 33 · Momentum 60–3360
Torq21 earned mentions, 5 launches and partnershipsLast week – · Peak 34 · Momentum 59–3459
Splunk (Cisco)129 earned mentions, 11 launches and partnershipsLast week – · Peak 35 · Momentum 58–3558Fig Security2 open roles per 100 staffLast week – · Peak 36 · Momentum 58–3658Huntbase6 launches and partnerships, headcount +8%Last week – · Peak 37 · Momentum 58–3758
IBM7 launches and partnershipsLast week – · Peak 38 · Momentum 58–3858SeviiHeadcount +6%Last week – · Peak 39 · Momentum 57–3957AquilaILast week – · Peak 40 · Momentum 57–4057
Two-person team automates ~7 hours weekly, runs 32 SOAR workflows, cut cyber insurance 45% saving ~$300,000 over three years.
CrowdStrike · 16 Oct 2026 · 1 source · Vendor sources only
Live on 4 November 2026 at 9:00 PST. Karthik Kannan and Oliver Rochford discuss the decoupled SIEM and why it matters as AI agents take on more security operations work. They cover how to give agents governed, auditable access to data and tools spread across SIEMs, data lakes and cloud platforms, while analysts keep control of the decisions that matter.
Anvilogic · Register for the webinar →
MDR providers want to take investigations further before handing them off, and incident response providers want recurring work between major incidents. Both are moving towards the same service: continuous investigation built on evidence from the affected systems. The piece looks at what that means for service providers, and where the formal incident response boundary still matters.
Binalyze · Read the article →
Security data is spread across platforms, and consolidating it all into one SIEM is slow and expensive. A decoupled architecture gives AI agents governed, auditable access to the data and tools a SOC already runs, so they can take on recurring workflows across them. The paper sets out the decoupling models and what each means for cost, governance and portability.
Anvilogic · Read the whitepaper →2 customer or deployment announcements, 2 of them naming the customer.
16 developments in 7 days, plus 15 hiring or headcount signals. The 4 most active vendors account for 50% of them (Arctic Wolf 2, Binalyze 2, IBM 2, Nebulock 2). 1 vendor was watched and had none. 104 are not fully collected yet.
Analysis and notes written by the Cyberfuturists team.
CrowdStrike used Fal.Con this week to make the agentic SOC a feature of Falcon. Nine months earlier, in December 2025, 7AI raised a 130 million dollar Series A, the largest Series A in the AI SOC market. The platforms are absorbing the category while…
Deals, funding, partnerships, leadership changes, contract awards, and incidents such as breaches or lawsuits.
Binalyze announced a strategic technical services partnership with DIFOSE to strengthen its digital forensics capabilities.
Binalyze · 16 Oct 2026 · 1 source · Vendor sources onlyElastic Security integrates into Google Distributed Cloud AI SecOps for air-gapped AI-driven threat detection.
Elastic · 16 Oct 2026 · 1 source · Vendor sources only
Integration connects Veeam Data Platform events with Arctic Wolf's Aurora platform for backup infrastructure visibility.
Arctic Wolf · 15 Oct 2026 · 4 sources · Vendor sources only
Kai Security works with Protexxa and will host a CISO dinner in Toronto on October 21st.
Kai Security · 15 Oct 2026 · 1 source · Vendor sources onlyNew products, and expansions of existing ones.
New plugin lets developers inspect and modify AI generation processes with minimal delay.
IBM · 21 Oct 2026 · 1 source · Vendor sources onlyAdds improved large file uploads, redesigned Organization Dashboard, relay-aware deployment links, and faster Investigation Hub data transfers.
Binalyze · 20 Oct 2026 · 1 source · Vendor sources onlyEnables reliable, cost-effective serving of large AI models on enterprise infrastructure.
IBM · 20 Oct 2026 · 1 source · Vendor sources onlyUnifies threat hunting, detection engineering, insider risk, and alert triage in AI workflows.
Nebulock · 20 Oct 2026 · 1 source · Vendor sources onlyVendors with 5 or more open roles, and LinkedIn headcount changes of 10% or more.
257 open roles; 25 of 117 vendors have public job listings.
TENEX.AI7AIArtemis SecurityQevlarKai SecurityCustomer stories and deployments, whether or not the vendor names the customer.
CloudHesive reported 50% fewer alerts requiring triage and 99% faster investigation-to-remediation after adopting Arctic Wolf.
Arctic Wolf · 19 Oct 2026 · 1 source · Vendor sources onlyTwo-person team automates ~7 hours weekly, runs 32 SOAR workflows, cut cyber insurance 45% saving ~$300,000 over three years.
CrowdStrike · 16 Oct 2026 · 1 source · Vendor sources onlyOpinion and research from vendors and researchers that is not about a specific announcement.
What practitioners are saying on X, Bluesky, Reddit and LinkedIn, newest first, and the most shared posts.
Reports in which analyst firms have named vendors, and the firms' own public posts. The reports are behind paywalls; every item links to its source.
By the Cyberfuturists
made using AunooAI in the SOC · 15 October–22 October 2026 · About · Privacy · Consensus · Three horizonsSend us a story about AI in the SOC that is not here, tell us your company belongs on the list. We read everything; what goes on the page is our call.
Everything here is open to read. If you want the data in your own tools, through our MCP server or an export, ask about data access.
Choosing a product in this market? Advisory helps buyers build a shortlist, test vendor claims and plan a proof of concept.
Imperum