Product launches

Cantina adds Clarion, Connection Panel, Inspector categorization features

Cantina announced apex-flash-1 model two weeks ago and added Clarion chat, Apex Connection Panel, and Amazon Inspector result categorization.

Cantina · 19 Oct 2026 · 1 source · Vendor sources only

Mars Security launches Co-Hunter Instructions for investigation control

Co-Hunter Instructions let users set standing rules for data sources, workflows, vocabulary applied to every hunt.

Mars Security · 19 Oct 2026 · 1 source · Vendor sources only

Swimlane launches SentinelOne Scan and Analyze Exposed Credentials Agent

The agent hunts exposed credentials on SentinelOne-managed endpoints, uses Hero AI for triage, and runs deterministically without exposing secrets.

Swimlane · 16 Oct 2026 · 1 source · Vendor sources only

Artemis Security launches Detection as Code feature

Detection rules integrate into customer GitHub, GitLab, Bitbucket Cloud, or Cursor Origin repositories via automated pull requests.

Artemis Security · 15 Oct 2026 · 2 sources · Vendor sources only

Strike48 launches University SOC Program for qualified schools

Free access to agentic orchestration platform for student-run SOCs, cyber labs and classrooms with pre-built L1, L2, Forensic and SOC Manager agents.

Arctic Wolf launches SwarmView for AI investigation visibility

SwarmView gives customers visibility into AI-driven investigations, launched at 2026 Security Operations Summit.

Arctic Wolf · 14 Oct 2026 · 4 sources · Also reported independently

Wirespeed adds four platform integrations

OpenVPN Access Server, Jamf Internet Security, Varonis DatAdvantage, and ThreatLocker integrations added.

Wirespeed · 14 Oct 2026 · 1 source · Vendor sources only

Arctic Wolf launches Aurora Superintelligence Platform and Agentic SOC

The platform and Agentic SOC help organizations understand and secure AI decision-making in cyber defense.

Arctic Wolf · 14 Oct 2026 · 2 sources · Vendor sources only

Backline launches feature routing remediation tickets to individuals

The feature automatically routes security remediation tickets to specific individuals, integrating with Slack, Teams, and Jira.

Backline AI · 14 Oct 2026 · 2 sources · Vendor sources only

Elastic launches Context Engine, nightshift and AlertZero AI tools

Context Engine provides AI agents enterprise context; nightshift adds AI SRE incident response; AlertZero automates alert triage and threat hunting.

Elastic · 14 Oct 2026 · 1 source · Vendor sources only

Crogl releases version 2.12.1 with faster triage and new connectors

Adds Claude 5 and GPT-6 support, Darktrace connector, deeper Microsoft Sentinel integration, scheduled jobs, exports, and Kubernetes deployment.

Crogl · 13 Oct 2026 · 1 source · Vendor sources only

Spharaka launches SAGE, a cybersecurity-trained AI model

SAGE is trained on 20 million real-world security events and reasons over tens of thousands of events per incident.

Spharaka · 13 Oct 2026 · 1 source · Vendor sources only

Torq launches REV channel partner program for AI SOC

Torq REV offers partners 100% services margin protection, full channel ownership, and a 10-day path to selling.

Torq · 13 Oct 2026 · 1 source · Vendor sources only

Cotool adds Opus 5.5, GPT-6 Sol, GPT-6 Luna to model catalog

Cotool released new models to its catalog alongside sandbox network restrictions, escalation visibility and delivery resend capability.

Cotool · 12 Oct 2026 · 1 source · Vendor sources only

Splunk ships Enterprise Security 8.7

New release adds governed response, stronger automation and connected security context.

Artemis Security launches Orion-1 frontier model for cyber defense

The company claims it is top performer on its new Decision-Grade Readiness benchmark measuring trustworthiness of security decisions.

Artemis Security · 8 Oct 2026 · 4 sources · Reported by multiple independent sources

Bricklayer AI launches Agentic Approvals for security action workflows

The system enables automated containment of threats like compromised workstations after meeting defined criteria.

Bricklayer AI · 8 Oct 2026 · 2 sources · Vendor sources only

Huntbase launches test lake with 1,250+ recorded attacks

Test lake offers 1,250+ recorded attacks, 300+ MITRE techniques, 1B+ events, rule testing in ~10 seconds.

Huntbase · 8 Oct 2026 · 2 sources · Vendor sources only

Stellar Cyber releases 7.0 with AI case triage and APIs

Stellar Cyber 7.0 unifies AI-powered case triage, SOC workflows, investigative evidence, automated response and new APIs.

Stellar Cyber · 5 Oct 2026 · 5 sources · Reported by multiple independent sources

Arctic Wolf adds 13 new integrations to Aurora Superintelligence Platform

New integrations include Cloudflare WAF, Claroty xDome Healthcare and Industrial, ExtraHop, Imperva WAF, Google Workspace, Veeam, Epic, and 1Password.

Arctic Wolf · 5 Oct 2026 · 1 source · Vendor sources only

Nebulock launches Detection Versioning for security detections

The system tracks what changes and why through journals, impact assessments, and full state preservation.

Nebulock · 5 Oct 2026 · 3 sources · Vendor sources only

CrowdStrike adds Third-Party App Insights and AI-Enhanced Remediation to Falcon Cloud Security

CrowdStrike · 5 Oct 2026 · 2 sources · Vendor sources only

Splunk introduces new Agentic SOC capabilities at SplunkConf26

Capabilities help organizations move faster from signal to action with trusted context, governance and automation.

Rapid7 launches Rapid7 Intelligence, unified threat intel and vulnerability engine

Built on Metasploit and Labs foundation, it monitors threats in real time.

Rapid7 · 2 Oct 2026 · 1 source · Vendor sources only

Exabeam releases October 2026 New-Scale platform update

Adds AI-assisted investigation, agent activity visibility, improved reporting and governance with behavioral baselines.

Exabeam · 1 Oct 2026 · 8 sources · Reported by multiple independent sources

Cylerian's Cyra agent automates platform tasks via chat

Cyra builds client reports and executes scoped actions like isolation or credential reset through conversational sessions.

Cylerian · 1 Oct 2026 · 1 source · Vendor sources only

Spharaka launches Sphere On-Premises with local AI reasoning

SAGE and AuraXP agents run fully air-gapped with 60-120 second investigations.

Spharaka · 1 Oct 2026 · 1 source · Vendor sources only

Splunk releases Cloud Platform 10.6 and Enterprise 10.6

New versions bring more ways to analyze data where it lives, put AI assistance into investigations and simplify platform operations.

Google introduces Gemini 4 Argon frontier intelligence model

Offers 1M token output limit for engineering, knowledge work and cybersecurity; rolling out to defenders via Fairwind Program.

Huntbase launches with 152 hunts, now 207

Self-service threat hunting library with reviewed hunts, growing from 152 to 207 hunts in six days.

Huntbase · 30 Sep 2026 · 1 source · Vendor sources only

Mars Security launches Alert Hunts for cross-tool alert investigation

Investigates alerts across all connected sources with verdict, MITRE mapping, evidence log; no new pipeline needed.

Mars Security · 30 Sep 2026 · 1 source · Vendor sources only

Splunk releases AI Assistant v2 with Agent Mode

New version can take action with Agent Mode, find content with Semantic Search, and learn naming conventions with Teach AI.

Beacon Security integrates with Claude's Compliance API

The integration is available today.

Beacon Security · 29 Sep 2026 · 1 source · Vendor sources only

SentinelOne launches Claude Compliance API integration for prompt security

SentinelOne Prompt Security enforces policy on Claude prompts in real time, agentless.

SentinelOne · 29 Sep 2026 · 1 source · Vendor sources only

Cotool adds endpoint and cloud investigation reach

Agents can now query Fleet and use Azure CLI, with expanded /hunt-intel commands and per-repository GitHub App routing.

Cotool · 28 Sep 2026 · 1 source · Vendor sources only

Nebulock releases open-source GATES Method framework

Nebulock's GATES Method, built with its detection team, helps decide when to promote threat hunts to detections; open source.

Nebulock · 28 Sep 2026 · 2 sources · Vendor sources only

AiStrike launches AiStrike for Insider Threat

The product autonomously investigates behavioral anomalies and drives governed response across identity, endpoint, cloud, DLP and physical access.

AiStrike · 28 Sep 2026 · 1 source · Vendor sources only

Exaforce launches ExaGo mobile app on App Store and Google Play

Exaforce made ExaGo available on the App Store and Google Play.

Exaforce · 24 Sep 2026 · 2 sources · Vendor sources only

BlinkOps integrates with Microsoft Sentinel Data Lake

Direct connection brings Sentinel data into agentic security operations for investigations and response.

BlinkOps · 23 Sep 2026 · 1 source · Vendor sources only

Huntbase opens self-service access to threat hunting platform

Users can now sign up and run hunts without prior request; platform grew from 149 to 162 hunts.

Huntbase · 22 Sep 2026 · 2 sources · Vendor sources only

Spectrum Security launches Detection Health to find broken rules

Continuously checks every detection against live environment, identifies root cause, and generates customized fixes with human in the loop.

Spectrum Security · 22 Sep 2026 · 1 source · Vendor sources only

Spharaka launches Signal for OT and ICS security

Passive-first platform offers asset discovery, deep packet inspection, and threat detection for 370+ industrial protocols, deployable air-gapped.

Spharaka · 17 Sep 2026 · 1 source · Vendor sources only

Cylerian releases open-source red team attack datasets for SOC testing

Mission datasets from autonomous AI red team attacks on live enterprise range, with EDR and network telemetry, available for teams to test their own stacks.

Cylerian · 17 Sep 2026 · 1 source · Vendor sources only

Bricklayer AI launches agent-native data plane for enterprise AI agents

The architecture enables persistent, governed access to enterprise-scale data for AI agents.

Bricklayer AI · 16 Sep 2026 · 2 sources · Vendor sources only

Tuskira launched Vector autonomous red team agent for attack surfaces

Vector continuously probes external attack surfaces and validates findings against deployed security controls.

Tuskira · 16 Sep 2026 · 2 sources · Vendor sources only

Mars Security launches MARS Playbooks for codified investigations

Playbooks run live across SIEM, EDR, identity and cloud environments with version control and run history, powered by federated search.

Mars Security · 16 Sep 2026 · 1 source · Vendor sources only

Exaforce introduced Agentless AI Security for AI agent visibility and control

The product discovers AI agents, analyzes risk and permissions, and protects sensitive data across environments.

Exaforce · 15 Sep 2026 · 3 sources · Vendor sources only

Cotool ships Serval and Lumos integrations, redesigned agent editor

Cotool shipped Serval and Lumos integrations, redesigned agent editor, automatic Slack setup, and new escalation requirements.

Cotool · 14 Sep 2026 · 1 source · Vendor sources only

Cotool unifies Detection and Response into single Agents workspace

Cotool unified Detection and Response workspaces, added model flexibility, hunt thresholds, and Cloudflare/Auth0/1Password/Tailscale integrations.

Cotool · 8 Sep 2026 · 1 source · Vendor sources only

Wirespeed added Login Security to Coalition Control platform

Login Security monitors login activity 24/7 and automatically terminates sessions for high-confidence threats.

Wirespeed · 2 Sep 2026 · 1 source · Vendor sources only

Cantina's Clarion now reads Claude Code telemetry and tracks MCP servers

Clarion feature now reads Claude Code telemetry and turns MCP servers into audited and tracked assets.

Cantina · 31 Aug 2026 · 1 source · Vendor sources only