Agentic SOC Top 40 Movers Week of 5–11 Oct · ranked by momentum on the Market Maturity Map : headcount change, hiring, launches and partnerships, earned mentions and the vendor's own posts over 90 days.
Vendor Last wk Peak Trend, 6 wks Momentum
1 ▲ 1 4th week at #1 · Executing · Accelerating 17 earned mentions, 24 open roles per 100 staff, raised Series A, Aug 2026 Last week 2 · Peak 1 · Momentum 85 2 1 Momentum 88 → 85 over 6 weeks 85 2 ▲ 4 Building · Accelerating Headcount +167%, 8 launches and partnerships Last week 6 · Peak 2 · Momentum 84 6 2 Momentum 80 → 84 over 6 weeks 84 3 ▼ 2 Executing · Accelerating 15 launches and partnerships, 17 earned mentions Last week 1 · Peak 1 · Momentum 84 1 1 Momentum 64 → 84 over 6 weeks 84 4 = Scaling · Accelerating 8 launches and partnerships, headcount +23% Last week 4 · Peak 4 · Momentum 79 4 4 Momentum 71 → 79 over 6 weeks 79 5 ▼ 2 Building · Accelerating Headcount +26%, 5 launches and partnerships Last week 3 · Peak 3 · Momentum 77 3 3 Momentum 70 → 77 over 6 weeks 77 6 ▼ 1 Executing · Accelerating Headcount +10%, 4 open roles per 100 staff Last week 5 · Peak 4 · Momentum 75 5 4 Momentum 77 → 75 over 6 weeks 75 7 = Executing · Accelerating 8 earned mentions, 7 launches and partnerships, raised Strategic, Oct 2026 Last week 7 · Peak 7 · Momentum 75 7 7 Momentum 63 → 75 over 6 weeks 75 8 = Executing · Accelerating 11 earned mentions, 12 open roles per 100 staff Last week 8 · Peak 8 · Momentum 74 8 8 Momentum 75 → 74 over 6 weeks 74 9 = Executing · Accelerating 26 open roles per 100 staff, headcount +19% Last week 9 · Peak 3 · Momentum 73 9 3 Momentum 76 → 73 over 6 weeks 73 10 ▲ 3 Executing · Accelerating 22 open roles per 100 staff, 5 launches and partnerships Last week 13 · Peak 4 · Momentum 72 13 4 Momentum 80 → 72 over 6 weeks 72 Show 11–40 11 = Scaling · Accelerating · 3rd week on chart 8 launches and partnerships, 6 earned mentions Last week 11 · Peak 11 · Momentum 71 11 11 Momentum 46 → 71 over 6 weeks 71 12 = Scaling · Accelerating · 4th week on chart 30 open roles per 100 staff, headcount +15% Last week 12 · Peak 12 · Momentum 69 12 12 Momentum 33 → 69 over 6 weeks 69 13 ▼ 3 Executing · Accelerating 11 launches and partnerships, 2 open roles per 100 staff Last week 10 · Peak 10 · Momentum 69 10 10 Momentum 72 → 69 over 6 weeks 69 14 = Scaling · Accelerating 12 open roles per 100 staff, 6 earned mentions Last week 14 · Peak 2 · Momentum 69 14 2 Momentum 86 → 69 over 6 weeks 69 15 New Executing · Accelerating 12 earned mentions, 4 launches and partnerships Last week – · Peak 15 · Momentum 68 – 15 Momentum 51 → 68 over 6 weeks 68 16 ▼ 1 Scaling · Accelerating 38 earned mentions, 4 launches and partnerships, raised Seed, Jul 2026 Last week 15 · Peak 3 · Momentum 68 15 3 Momentum 75 → 68 over 6 weeks 68 17 ▲ 2 Building · Accelerating 6 earned mentions Last week 19 · Peak 17 · Momentum 68 19 17 Momentum 52 → 68 over 6 weeks 68 18 ▲ 2 Building · Accelerating 15 launches and partnerships Last week 20 · Peak 15 · Momentum 68 20 15 Momentum 67 → 68 over 6 weeks 68 19 ▼ 3 Executing · Accelerating 23 open roles per 100 staff, 5 earned mentions Last week 16 · Peak 16 · Momentum 68 16 16 Momentum 60 → 68 over 6 weeks 68 20 ▼ 3 Executing · Growing 4 earned mentions, headcount +8% Last week 17 · Peak 14 · Momentum 66 17 14 Momentum 66 → 66 over 6 weeks 66 21 ▼ 3 Scaling · Growing 5 launches and partnerships, 2 open roles per 100 staff Last week 18 · Peak 12 · Momentum 66 18 12 Momentum 70 → 66 over 6 weeks 66 22 ▲ 6 Scaling · Growing 6 open roles per 100 staff, headcount +8% Last week 28 · Peak 22 · Momentum 65 28 22 Momentum 52 → 65 over 6 weeks 65 23 ▲ 7 Scaling · Growing Headcount +17%, 4 open roles per 100 staff Last week 30 · Peak 23 · Momentum 63 30 23 Momentum 56 → 63 over 6 weeks 63 24 ▲ 2 Emerging · Growing Headcount +25%, 6 launches and partnerships Last week 26 · Peak 24 · Momentum 62 26 24 Momentum 34 → 62 over 6 weeks 62 25 ▼ 4 Emerging · Growing Headcount +50% Last week 21 · Peak 12 · Momentum 62 21 12 Momentum 64 → 62 over 6 weeks 62 26 ▲ 10 Scaling · Growing · 2nd week on chart 3 earned mentions Last week 36 · Peak 26 · Momentum 62 36 26 Momentum 41 → 62 over 6 weeks 62 27 ▼ 5 Building · Growing 4 launches and partnerships Last week 22 · Peak 13 · Momentum 62 22 13 Momentum 53 → 62 over 6 weeks 62 28 ▼ 4 Scaling · Growing 6 launches and partnerships Last week 24 · Peak 20 · Momentum 60 24 20 Momentum 53 → 60 over 6 weeks 60 29 ▼ 6 Scaling · Growing 1 open role per 100 staff Last week 23 · Peak 23 · Momentum 60 23 23 Momentum 59 → 60 over 6 weeks 60 30 ▼ 5 Scaling · Growing 4 open roles per 100 staff, 4 launches and partnerships Last week 25 · Peak 23 · Momentum 59 25 23 Momentum 52 → 59 over 6 weeks 59 31 = Scaling · Growing · 2nd week on chart 4 earned mentions Last week 31 · Peak 31 · Momentum 59 31 31 Momentum 49 → 59 over 6 weeks 59 32 New Scaling · Growing 7 launches and partnerships Last week – · Peak 32 · Momentum 58 – 32 Momentum 50 → 58 over 6 weeks 58 33 Re-entry Executing · Growing · 3rd week on chart 5 earned mentions Last week – · Peak 29 · Momentum 56 – 29 Momentum 55 → 56 over 6 weeks 56 34 ▼ 5 Andesite Scaling · Growing 7 open roles per 100 staff, 5 launches and partnerships Last week 29 · Peak 15 · Momentum 56 29 15 Momentum 65 → 56 over 6 weeks 56 35 Re-entry Building · Growing · 2nd week on chart 7 launches and partnerships, 5 earned mentions Last week – · Peak 35 · Momentum 56 – 35 Momentum 51 → 56 over 6 weeks 56 36 Re-entry Scaling · Growing · 4th week on chart 6 launches and partnerships Last week – · Peak 29 · Momentum 55 – 29 Momentum 50 → 55 over 6 weeks 55 37 Re-entry Executing · Growing · 3rd week on chart 8 open roles per 100 staff Last week – · Peak 18 · Momentum 55 – 18 Momentum 65 → 55 over 6 weeks 55 38 ▼ 6 Building · Growing Headcount +8% Last week 32 · Peak 31 · Momentum 55 32 31 Momentum 47 → 55 over 6 weeks 55 39 ▼ 6 Building · Growing 38 open roles per 100 staff Last week 33 · Peak 24 · Momentum 55 33 24 Momentum 59 → 55 over 6 weeks 55 40 ▼ 13 Emerging · Growing Headcount +17% Last week 27 · Peak 17 · Momentum 54 27 17 Momentum 50 → 54 over 6 weeks 54 Featured development · Product launch
Trellix Redefines Cyber Defense for the AI Era Trellix launched Trellix Wise for Private Cloud, the first on-premises federated AI core for security operations centers, designed to deliver machine-speed cyber defense for data-sensitive environments.
Trellix launched Trellix Wise™ for Private Cloud, the first on-premises federated AI core for security operations centers, designed to deliver…
· 14 Oct 2026 · 4 sources · Reported by multiple independent sources
Sponsored · Webinar
Live on 4 November 2026 at 9:00 PST. Karthik Kannan and Oliver Rochford discuss the decoupled SIEM and why it matters as AI agents take on more security operations work. They cover how to give agents governed, auditable access to data and tools spread across SIEMs, data lakes and cloud platforms, while analysts keep control of the decisions that matter.
Sponsored · Article
MDR providers want to take investigations further before handing them off, and incident response providers want recurring work between major incidents. Both are moving towards the same service: continuous investigation built on evidence from the affected systems. The piece looks at what that means for service providers, and where the formal incident response boundary still matters.
Sponsored · Whitepaper
Security data is spread across platforms, and consolidating it all into one SIEM is slow and expensive. A decoupled architecture gives AI agents governed, auditable access to the data and tools a SOC already runs, so they can take on recurring workflows across them. The paper sets out the decoupling models and what each means for cost, governance and portability.
Highlights Customer announcements from Qevlar, 7AI, Palo Alto Networks. 3 customer or deployment announcements, 3 of them naming the customer.
22 of 115 vendors had a development. 25 developments in 7 days, plus 19 hiring or headcount signals. The 22 vendors with 1 or more developments account for 100% of them (Arctic Wolf 3, Torq 2, 7AI 1, Artemis Security 1, Backline AI 1, and 17 more). 72 vendors were watched and had none. 21 are not fully collected yet.
Arctic Wolf: 3 developments Torq: 2 developments 7AI: 1 development Artemis Security: 1 development Backline AI: 1 development
Analysis Analysis and notes written by the Cyberfuturists team.
Our analysis
CrowdStrike used Fal.Con this week to make the agentic SOC a feature of Falcon. Nine months earlier, in December 2025, 7AI raised a 130 million dollar Series A, the largest Series A in the AI SOC market. The platforms are absorbing the category while…
By the Cyberfuturists · 6 Sep 2026 ·
Read → Deals, funding, partnerships, leadership changes, contract awards, and incidents such as breaches or lawsuits.
Partnership
IBM and MeitY Startup Hub sign MoU for India startups The MoU connects enterprise technology startups in India with IBM's resources, technology and mentorship.
· 13 Oct 2026 · 1 source · Vendor sources only
Partnership
Arctic Wolf partners with Veeam on backup infrastructure security The partnership covers monitoring backup infrastructure, detecting suspicious activity, and correlating security events.
· 12 Oct 2026 · 2 sources · Vendor sources only
Executive appointment
Mate Security hires Alon Bitton as Head of Finance Bitton joins Mate Security as Head of Finance, bringing enterprise finance and Big Four audit experience.
· 12 Oct 2026 · 1 source · Vendor sources only
Partnership
Camelot Secure partners with Baltimore Ravens on cybersecurity Camelot Secure announced a partnership with the Baltimore Ravens addressing sports franchise cybersecurity.
· 9 Oct 2026 · 1 source · Vendor sources only
New products, and expansions of existing ones.
Product launch
Artemis Security launches Detection as Code feature Detection rules integrate into customer GitHub, GitLab, Bitbucket Cloud, or Cursor Origin repositories via automated pull requests.
· 15 Oct 2026 · 1 source · Vendor sources only
Product launch
Trellix Redefines Cyber Defense for the AI Era Trellix launched Trellix Wise for Private Cloud, the first on-premises federated AI core for security operations centers, designed to deliver machine-speed cyber defense for data-sensitive environments.
· 14 Oct 2026 · 4 sources · Reported by multiple independent sources
Product launch
Arctic Wolf launches SwarmView for AI investigation visibility SwarmView gives customers visibility into AI-driven investigations, launched at 2026 Security Operations Summit.
· 14 Oct 2026 · 4 sources · Also reported independently
Product launch
Arctic Wolf launches Aurora Superintelligence Platform and Agentic SOC The platform and Agentic SOC help organizations understand and secure AI decision-making in cyber defense.
· 14 Oct 2026 · 2 sources · Vendor sources only
Vendors with 5 or more open roles, and LinkedIn headcount changes of 10% or more.
204 open roles; 23 of 115 vendors have public job listings.
Hiring
Top 5 by open roles Job listings · open now
sales 17, other 13, marketing 8
38 open roles engineering 9, other 6, marketing 4
19 open roles sales 8, other 3, marketing 3
18 open roles sales 6, engineering 5, other 5
18 open roles engineering 10, sales 2, marketing 1
15 open roles Customer stories and deployments, whether or not the vendor names the customer.
Customer
Vancord chooses Qevlar AI over building investigation tool in-house Customer cited token economics, technical debt, and model maintenance as deciding factors.
· 14 Oct 2026 · 1 source · Vendor sources only
Customer
Cole, Scott & Kissane uses 7AI to cut investigation time The 619-attorney firm cut investigation time from over an hour to under seven minutes using 7AI.
· 13 Oct 2026 · 1 source · Vendor sources only
Customer
Oldcastle APG uses Palo Alto Networks Prisma SASE and ADEM Oldcastle APG uses Prisma SASE and ADEM for proactive visibility to identify connectivity issues before users call.
· 13 Oct 2026 · 1 source · Vendor sources only
Opinion and research from vendors and researchers that is not about a specific announcement.
What practitioners are saying on X, Bluesky, Reddit and LinkedIn, newest first, and the most shared posts.
Most shared posts Reports in which analyst firms have named vendors, and the firms' own public posts. The reports are behind paywalls; every item links to its source.
Sponsored Sponsored · Webinar · Anvilogic
Live on 4 November 2026 at 9:00 PST. Karthik Kannan and Oliver Rochford discuss the decoupled SIEM and why it matters as AI agents take on more security operations work.
Sponsored · Article · Binalyze
MDR providers want to take investigations further before handing them off, and incident response providers want recurring work between major incidents.
Sponsored · Whitepaper · Anvilogic
Security data is spread across platforms, and consolidating it all into one SIEM is slow and expensive.
Market Maturity Map Emerging Building Scaling Executing → → → ← smaller by scale larger by scale → further from the base = more momentum innovating — top third by product work hiring — top third by open roles per head raised in the last year 7AI 7AI Exaforce Exaforce Dropzone AI Dropzone AI Prophet Security Prophet Security Artemis Security Artemis Security Daylight Security Daylight Security Kai Security Kai Security Stellar Cyber Stellar Cyber holding growing accelerating
97 of 100 vendors mapped by scale and momentum; the 40 largest and fastest shown here. Full map with names .
What the market is talking about Being discussed Articles in the last 7 days, by subject. ▲ marks a subject running above its 30-day pace.
Emerging Smaller subjects whose coverage is concentrated in the last 7 days, against the last 30.
From 565 articles over the last 30 days, grouped 15 October.
Who moved Product launch · 15 Oct 2026
Artemis Security launches Detection as Code feature
Detection rules integrate into customer GitHub, GitLab, Bitbucket Cloud, or Cursor Origin repositories via automated pull requests.
Product launch · 14 Oct 2026
Trellix Redefines Cyber Defense for the AI Era
Trellix launched Trellix Wise for Private Cloud, the first on-premises federated AI core for security operations centers, designed to deliver machine-speed cyber defense for data-sensitive environments.
Product launch · 14 Oct 2026
Arctic Wolf launches SwarmView for AI investigation visibility
SwarmView gives customers visibility into AI-driven investigations, launched at 2026 Security Operations Summit.
Customer · 14 Oct 2026
Vancord chooses Qevlar AI over building investigation tool in-house
Customer cited token economics, technical debt, and model maintenance as deciding factors.
Product launch · 14 Oct 2026
Arctic Wolf launches Aurora Superintelligence Platform and Agentic SOC
The platform and Agentic SOC help organizations understand and secure AI decision-making in cyber defense.
Product launch · 14 Oct 2026
Backline launches feature routing remediation tickets to individuals
The feature automatically routes security remediation tickets to specific individuals, integrating with Slack, Teams, and Jira.
Product launch · 14 Oct 2026
Elastic launches Context Engine, nightshift and AlertZero AI tools
Context Engine provides AI agents enterprise context; nightshift adds AI SRE incident response; AlertZero automates alert triage and threat hunting.
Customer · 13 Oct 2026
Cole, Scott & Kissane uses 7AI to cut investigation time
The 619-attorney firm cut investigation time from over an hour to under seven minutes using 7AI.
Who got attention By engagement Reactions on the vendor's own posts in the period.
Google SecOps (Google)
3,763
▼ 1,359 IBM
3,576
▲ 1,550 CrowdStrike
2,261
▲ 716 Palo Alto Networks
1,165
▼ 656 ServiceNow
1,118
▼ 547 Most discussed Articles and posts by others that name the vendor.
Splunk (Cisco)
18
▼ 8 Exabeam
11
▼ 8 Trellix
11
▲ 11 Artemis Security
8
▲ 7 Spharaka
7
▲ 3 Influence and Influencers Voices who posted this period first, then the rest we follow and track, by reach, with places kept for each platform.
The Cyber Security Hub™ @TheCyberSecHub · XAnalyst / press · 195,185 followers
quiet this period David Bombal @davidbombal · XAnalyst / press · 183,764 followers
quiet this period The XSS Rat - Proud XSS N00b :-) @theXSSrat · XPractitioner · 168,370 followers
quiet this period SC Media @SCMagazine · XAnalyst / press · 119,202 followers
quiet this period
Weekly briefing Week of 2026-09-14 · approved 22 September 2026 AI in the SOC — Week of 2026-09-14 Multiple vendors announced new capabilities or product versions during the week.
Read the briefing
By the numbers Developments
25
in the last 7 days
Records analysed
683
articles, posts and pages
Open roles
204
23 of 115 vendors have public job listings
Vendors that moved
22
of 115 watched
Most active vendors Developments in the period, against the period before.
Arctic Wolf
3
▲ 2 Torq
2
▲ 1 7AI
1
▼ 1 Artemis Security
1
▼ 1 Backline AI
1
▲ 1 
7AI
Detections AI (was System Two Security)
Exaforce
Nebulock
Secure.com
Daylight Security
Prophet Security
Dropzone AI
Kai Security
Artemis Security
Tuskira
Method Security
Anvilogic
Crogl
Stellar Cyber
Mate Security
Spharaka
Bricklayer AI
Qevlar
Legion Security
Fig Security
Cognna
Twine Security
Huntbase
VigilBase
Cantina
Rilian
Cylerian
D3 Security
Mars Security
Simbian
Binalyze
Strike48 (A Devo company)
Cotool
Command Zero
BlinkOps
Sevii
Wraithwatch
Threatlens
Trellix · 14 Oct 2026 · 4 sources · Reported by multiple independent sources
IBM
Arctic Wolf
Camelot Secure
Palo Alto Networks
AiStrike (Leader)