Cyberfuturists · 24 July–22 October 2026

AI in the SOC Market Maturity Map

How is AI-led SOC automation evolving, and which vendors show material change in capabilities, commercial traction, workforce, funding, partnerships, customer adoption, positioning, or risk?

Vendors that use AI to detect, investigate and respond to threats, and to automate the work of security operations (SOC) teams. It covers AI SOC analysts and agentic SOC platforms, and the established SIEM, XDR, EDR and SOAR platforms adding the same capabilities. 117 vendors, 24 July–22 October 2026.

Generated 22 October 2026, 19:11 UTC

Market Maturity MapWhere 97 of the market's 100 vendors are mapped today, based on how active they are, how they are growing and how fast they are moving.

Vendors placed by size and by growth, from public data we collect: headcount, followers, funding, customers, open roles, launches and mentions. It does not rate product quality, customer satisfaction or strategy. Computed 2026-10-22 over the last 90 days.

Highlight Show

AI SOC 88AI MDR 9

Who is where — Executing 15, Scaling 29, Building 35, Emerging 18; accelerating 17, growing 58, holding 22, innovating 35, hiring 13, raised in the last year 27, acquired 3, pivoted 1, large incumbents 19

Marks after a name: ◌ innovating · ⚒ hiring · $ raised in the last year · "(was …)" moved stage since the previous map. Each mark belongs to the name before it.

Executing (15) — the largest vendors: scale of 75 and over

7AI $, Exaforce ◌ $, BlinkOps $, Anvilogic ◌ $, Stellar Cyber ◌, Dropzone AI ◌ $, Intezer ◌, Prophet Security ◌ $, Kai Security ◌, Artemis Security ◌ ⚒ $, Qevlar ⚒, Daylight Security ◌ $, TENEX.AI ⚒, Strike48 (A Devo company) ◌, Legion Security

Scaling (29) — scale from 50 to 75

Eventus Security, D3 Security ◌, Cantina ◌ $, TechBridge Consultancy Services, Mate Security $, HawkEye ◌, UnderDefense ◌, Simbian ◌, Crogl ◌, AquilaI ◌, Twine Security, Binalyze ◌, DeepTempo, Securaa, BEYON Cyber, Method Security ⚒ $, Andesite, Command Zero, Fig Security $, Beacon Security ⚒ $, Cognna ◌ $, StrikeReady $, Spectrum Security ◌ $, Tuskira ◌, Nebulock ◌ $, Cylerian ◌, Conifers AI ◌ $, Mars Security ◌, Backline AI ◌

Building (35) — scale from 25 to 50

Rilian $, AiStrike ⚒ $, Spharaka ◌, Wraithwatch ⚒, Nua, Embed Security, Variance (was Intrinsic) ⚒, Bricklayer AI ◌, Imperum ◌ $, Sevii ◌ $, Camelot Secure ◌, Redblock, Secure.com $, PRE Security, Tenacium $, guarddog, Detections AI (was System Two Security) ◌ $, Mave $, Cotool ◌ $, Joon, Arcanna.ai ⚒, RedCarbon, SecsphereSOC, Alpha Level, Spacewalk AI, HTCD, AISOC, Seculyze, Tencyle, Sleuth Kit Labs, Louie AI ◌, Almanax, Elezar, Arambh Labs, HoundBytes

Emerging (18) — the smallest vendors: scale under 25

CipherData ⚒, Threatlens, Tier4ai, FlintX, WiseBee ⚒, Priam Cyber AI, HarkX, TandemTrace ⚒, VisionHeight, Miru Labs, CounterShadow, SOCNova, Tracecat, Vinci Logic, NextSOC, VigilBase ⚒, SOC Jedi.ai, Huntbase ◌

Accelerating (17) — momentum of 67 and over

Exaforce, Artemis Security, Daylight Security, Detections AI (was System Two Security), Bricklayer AI, 7AI, Prophet Security, Nebulock, Method Security, Dropzone AI, Kai Security, Mate Security, Cognna, Spharaka, Qevlar, Crogl, Stellar Cyber

Growing (58) — momentum from 33 to 67

VigilBase, Tuskira, Legion Security, Twine Security, Mars Security, BlinkOps, Cantina, Binalyze, Secure.com, AquilaI, Spectrum Security, Anvilogic, Eventus Security, Intezer, Cylerian, Rilian, AiStrike, Fig Security, Huntbase, Sevii, UnderDefense, Cotool, CipherData, Embed Security, WiseBee, Simbian, HawkEye, Wraithwatch, D3 Security, Backline AI, Camelot Secure, Tracecat, SOCNova, Mave, BEYON Cyber, TechBridge Consultancy Services, RedCarbon, Miru Labs, Louie AI, Imperum, Variance (was Intrinsic), Strike48 (A Devo company), Beacon Security, TENEX.AI, Arambh Labs, guarddog, Andesite, Seculyze, Conifers AI, Alpha Level, VisionHeight, NextSOC, Threatlens, DeepTempo, HTCD, Redblock, StrikeReady, HoundBytes

Holding (22) — momentum under 33

PRE Security, Command Zero, Arcanna.ai, HarkX, TandemTrace, FlintX, Spacewalk AI, Tier4ai, Priam Cyber AI, SOC Jedi.ai, Securaa, Sleuth Kit Labs, CounterShadow, Vinci Logic, Tencyle, Tenacium, Nua, Elezar, Joon, AISOC, Almanax, SecsphereSOC

Innovating (35) — top third by launches, corroborated launches, research posts and engineering hiring; a marker across every tier

Exaforce, Artemis Security, Prophet Security, Dropzone AI, Daylight Security, Kai Security, Stellar Cyber, Anvilogic, Intezer, Cantina, Crogl, Nebulock, Binalyze, Cognna, AquilaI, D3 Security, UnderDefense, Bricklayer AI, Strike48 (A Devo company), HawkEye, Simbian, Tuskira, Spharaka, Detections AI (was System Two Security), Spectrum Security, Mars Security, Cylerian, Backline AI, Sevii, Conifers AI, Camelot Secure, Cotool, Imperum, Louie AI, Huntbase

Hiring (13) — top third by open roles per 100 staff, with at least 3 roles open; a marker across every tier

VigilBase (6 open roles, 200 per 100 staff), Variance (was Intrinsic) (9 open roles, 45 per 100 staff), Wraithwatch (6 open roles, 38 per 100 staff), Artemis Security (23 open roles, 37 per 100 staff), CipherData (4 open roles, 36 per 100 staff), Beacon Security (9 open roles, 36 per 100 staff), TandemTrace (3 open roles, 33 per 100 staff), Arcanna.ai (7 open roles, 29 per 100 staff), Method Security (9 open roles, 29 per 100 staff), WiseBee (4 open roles, 27 per 100 staff), Qevlar (22 open roles, 25 per 100 staff), AiStrike (12 open roles, 22 per 100 staff), TENEX.AI (43 open roles, 21 per 100 staff)

Raised in the last year (27) — a round dated inside the last 365 days, from the vendor's own post, a matched news event or the Crunchbase news list

Prophet Security (round not stated, 2026-10), StrikeReady (round not stated, 2026-09), 7AI (Series A, 2026-08), Mate Security (Seed, 2026-07), Cantina (round not stated, 2026-07), Beacon Security (Seed, 2026-07), Imperum (Seed, 2026-07), Anvilogic (round not stated, 2026-07), Nebulock (Series A, 2026-06), Exaforce (Series B, 2026-05), Detections AI (was System Two Security) (round not stated, 2026-05), Spectrum Security (Seed, 2026-04), Rilian (Seed, 2026-04), Artemis Security (Series A, 2026-04), Tenacium (round not stated, 2026-03), Daylight Security (Series A, 2026-03), Cotool (Seed, 2026-03), Fig Security (Seed, 2026-03), Sevii (round not stated, 2026-02), Dropzone AI (Series B, 2026-01), AiStrike (Seed, 2026-01), Mave (Seed, 2026-01), Cognna (Series A, 2025-12), Secure.com (Seed, 2025-11), Method Security (Seed, 2025-11), BlinkOps (round not stated, 2025-11), Conifers AI (Strategic, 2025-10)

Acquired (3) — on the record, not on the map

Wirespeed — by Coalition, 2025-11-06; Kenzo Security — by Rapid7, 2026-03-26; Radiant Security — by Cribl (AI technology assets), 2026-08-19

Pivoted (1) — left this market for another; on the record, not on the map

Zaun — now security for AI (securing AI systems and agents), no longer AI for security operations

Large incumbents (19) — in this market, but too large to compare on size; listed, not on the map

Arctic Wolf; CrowdStrike; Elastic; Exabeam; Fortinet; Google SecOps (Google); IBM; Leidos; Mandiant (Google); Microsoft; Palo Alto Networks; Rapid7; Sekoia; SentinelOne; ServiceNow; Splunk (Cisco); Swimlane; Torq; Trellix

Analyst notes and adjustments (21)

Redblock: Active. Was marked closed on 31 Aug 2026 from a Crunchbase record that belonged to a different company (RedBlock, a blockchain firm at redblock.network). That record was retired on 9 Oct 2026. Redblock posts on LinkedIn (9 posts in the 30 days to 8 Oct), launched SailPoint AI agent deployment in March 2026, and is hiring.
Kenzo Security: Acquired by Rapid7; Crunchbase records the transaction and the company's own LinkedIn post of 26 March 2026 announced it. Listed as acquired, not placed.
Radiant Security: Cribl bought Radiant Security's AI SOC technology assets on 19 August 2026 (Cribl announcement; second security acquisition this year). Listed as acquired, not placed.
Zaun: now security for AI (securing AI systems and agents), no longer AI for security operations
Arctic Wolf: Large incumbent: Arctic Wolf is in this market through the Aurora Agentic SOC (March 2026), run inside its managed detection and response service. Its size is not comparable, so it is listed, not placed.
CrowdStrike: Large incumbent: CrowdStrike is in this market through Charlotte AI. Its headcount and followers are the whole company's, so it is listed, not placed.
Elastic: Large incumbent: Elastic is in this market through Elastic Security and the Elastic AI SOC Engine. Its size is not comparable, so it is listed, not placed.
Exabeam: Large incumbent: Exabeam (merged with LogRhythm in 2024) is an established SIEM vendor in this market through Exabeam Nova. Listed, not placed.
Fortinet: Large incumbent: Fortinet is in this market through FortiSOC and its FortiAI agents. Its size is not comparable, so it is listed, not placed.
Google SecOps (Google): Large incumbent: Google is in this market through Google Security Operations (Google SecOps). Its LinkedIn link is Google's company page, not the Google Cloud showcase page, which the collector has not been tested on.
IBM: Large incumbent: IBM is in this market through ATOM, its agentic SOC engine, delivered mainly through its managed detection and response services. Its size is not comparable, so it is listed, not placed.
Leidos: Leidos is a defence and IT contractor of about 47,000 staff. It entered this market with UpHold Effect Agentic SOC Automation on 29 Sep 2026. Its headcount and LinkedIn followers describe all of Leidos, not the product.
Mandiant (Google): Large incumbent: Mandiant, part of Google Cloud since 2022, is in this market through Mandiant Threat Defense. It is tracked apart from Google Cloud (searched as Google Security Operations) so the two product lines stay separate. Listed, not placed.
Microsoft: Large incumbent: Microsoft is in this market through Security Copilot. Its LinkedIn link is the whole company's page, not Microsoft Security's showcase page, which the collector has not been tested on.
Palo Alto Networks: Large incumbent: Palo Alto Networks is in this market through Cortex XSIAM and AgentiX. Its headcount and followers are the whole company's, so it is listed, not placed.
Rapid7: Large incumbent: Rapid7 is in this market through Incident Command and bought Kenzo Security in March 2026. Its size is not comparable, so it is listed, not placed.
SentinelOne: Large incumbent: SentinelOne is in this market through Purple AI. Its size is not comparable, so it is listed, not placed.
ServiceNow: Large incumbent: ServiceNow is in this market through Security Operations and its SOC AI Specialist (due December 2026). Its size is not comparable, so it is listed, not placed.
Splunk (Cisco): Large incumbent: Cisco sells its agentic SOC as Splunk (Splunk Enterprise Security and the Splunk Agentic SOC Workforce) together with Cisco XDR, so this one entry covers both and is searched under both names. Its size is not comparable, so it is listed, not placed.
Torq: Large incumbent: Torq (476 staff, $332M raised, valued at $1.2B in January 2026) is the largest of the security-automation vendors, so it is listed with the incumbents rather than ranked against startups. Listed, not placed.
Trellix: Large incumbent: Trellix (McAfee Enterprise and FireEye, owned by STG) is in this market through Trellix Wise. Its size is not comparable, so it is listed, not placed.

Not rated (1) — what each one lacks

A vendor is rated only when we have every input. 1 lack linkedin headcount (latest count); 1 lack linkedin followers; 1 lack open roles per 100 staff.

SOCAI: linkedin headcount (latest count), linkedin followers, open roles per 100 staff

How the map is computed — weights and rules

Input	Axis	Weight
LinkedIn headcount (latest count)	scale	0.35
Disclosed funding total (optional)	scale	0.30
Customer evidence, weighted, last 12 months named customer in their own words 3, named in the vendor's words 2, unnamed 1	scale	0.25
LinkedIn followers	scale	0.10
Headcount change in the period (optional)	momentum	0.30
Launches and partnerships in the period	momentum	0.25
Earned mentions in the period	momentum	0.15
Open roles per 100 staff	momentum	0.15
Crunchbase growth score (secondary) (optional)	momentum	0.10
Own LinkedIn posts in the period	momentum	0.05

Each input is a percentile rank among the rated vendors; an axis is the weighted mean of its inputs. On the map, the angle is the stage, by scale: Emerging under 25, Building from 25, Scaling from 50, Executing from 75, left to right. The distance from the base is momentum: holding under 33, growing from 33, accelerating from 67. A vendor moves right as it grows and outward as it speeds up.

Executive assessment

4 findings

2 acquisitions among the vendors we track.
Leidos acquired Analogic on 5 October. Coalition, Inc. acquired Wirespeed on 17 September.
- Leidos Security Enterprise Solutions and Analogic close acquisition deal (Vendor sources only, 5 Oct 2026)
- Coalition acquired Wirespeed for millisecond threat response capability (Vendor sources only, 17 Sep 2026)
New funding for StrikeReady, Prophet Security.
StrikeReady raised a new round led by Wa'ed Ventures on 16 September. StrikeReady says it has raised $29M in total. Prophet Security raised a strategic round; the amount is not stated on 8 October.
- StrikeReady raises funding led by Wa'ed Ventures (Also reported independently, 16 Sep 2026)
- Prophet Security raises strategic investment from Amex and Citi Ventures (Vendor sources only, 8 Oct 2026)
Customer announcements from CrowdStrike, Spectrum Security, Nebulock, BlinkOps and 9 more.
18 customer or deployment announcements, 13 of them naming the customer.
- Solarig standardizes on CrowdStrike Falcon platform for security (Vendor sources only, 1 Oct 2026)
- SEP2 doubles detection rule coverage with Spectrum Security (Vendor sources only, 3 Sep 2026)
- Global software company uses Nebulock for insider risk program (Vendor sources only, 25 Sep 2026)
- Coterie Insurance uses BlinkOps for vulnerability alert automation (Vendor sources only, 31 Aug 2026)
- DXC Technology runs 7AI across global security operations (Vendor sources only, 31 Aug 2026)
59 of 117 vendors had a development.
140 developments in 90 days, plus 26 hiring or headcount signals. The 3 most active vendors account for 12% of them (CrowdStrike 6, Splunk 6, Arctic Wolf 5). 48 vendors were watched and had none. 10 are not fully collected yet.
- CrowdStrike: 6 developments
- Splunk: 6 developments
- Arctic Wolf: 5 developments
- Cotool: 4 developments
- IBM: 4 developments

Weekly briefing

Week of 2026-09-14 · approved 22 September 2026

AI in the SOC — Week of 2026-09-14

Multiple vendors announced new capabilities or product versions during the week.

Read the briefing

Vendors with a development

166 developments · 59 vendors

Vendor	Development	Evidence	Why it matters
StrikeReady	StrikeReady raises funding led by Wa'ed Ventures Funding · 16 Sep 2026	@thedatatechtimes.bsky.social on Bluesky · 2 sources Also reported independently	$29M raised in total, the vendor says.
Stellar Cyber	Stellar Cyber releases 7.0 with AI case triage and APIs Product expansion · 5 Oct 2026	helpnetsecurity.com · 5 sources Reported by multiple independent sources	INTRODUCING...7.0!
Leidos	Leidos Security Enterprise Solutions and Analogic close acquisition deal Acquisition · 5 Oct 2026	the company's LinkedIn post · 1 source Vendor sources only
Wirespeed	Coalition acquired Wirespeed for millisecond threat response capability Acquisition · 17 Sep 2026	the company's LinkedIn post · 1 source Vendor sources only	Bought by Coalition, Inc..
Prophet Security	Prophet Security raises strategic investment from Amex and Citi Ventures Funding · 8 Oct 2026	the company's website · 1 source Vendor sources only	A strategic round; the amount is not stated.
Strike48	Strike48 launches on-prem agentic SOC appliance for air-gapped deployments Product expansion · 23 Sep 2026	@bigearthdata.ai on Bluesky · 2 sources Also reported independently	Strike48 now supports four deployment models: cloud, private cloud, on-premises, and fully air-gapped.
Intezer	Intezer revenue triples as enterprise AI security expands Product expansion · 2 Oct 2026	securitybrief.in · 1 source Also reported independently
SentinelOne	SentinelOne extends Wayfinder coverage across endpoints, identities, and cloud workloads Product expansion · 25 Sep 2026	helpnetsecurity.com · 1 source Also reported independently	SentinelOne announced expanded Wayfinder Threat Hunting to AWS, Azure, and Google Cloud, combining AI-powered Singularity Platform telemetry with…

Other developments (158)

CrowdStrike	Inside CrowdStrike’s Move To Secure Enterprise Agentic AI	Product expansion · 23 Sep 2026	1 source · Also reported independently
Torq	Torq partners with Merlin Cyber for federal AI SOC modernization	Partnership · 8 Sep 2026	2 sources · Also reported independently
Splunk	CSCO, NVDA Stock Inch Higher — Cisco And Nvidia Expand Partnership To Bring Agentic AI To…	Partnership · 15 Sep 2026	1 source · Also reported independently
Exabeam	Exabeam releases October 2026 New-Scale platform update	Product launch · 1 Oct 2026	8 sources · Reported by multiple independent sources
Trellix	Trellix Redefines Cyber Defense for the AI Era	Product launch · 14 Oct 2026	5 sources · Reported by multiple independent sources
Artemis Security	Artemis Security launches Orion-1 frontier model for cyber defense	Product launch · 8 Oct 2026	4 sources · Reported by multiple independent sources
Elastic	Elastic’s AlertZero puts AI agents to work on security alert overload	Product launch · 8 Oct 2026	2 sources · Reported by multiple independent sources
Arctic Wolf	Arctic Wolf launches SwarmView for AI investigation visibility	Product launch · 14 Oct 2026	4 sources · Also reported independently
Exabeam	Exabeam adds Agentic SOC capabilities to New-Scale platform	Product launch · 1 Oct 2026	3 sources · Also reported independently
Splunk	Splunk introduces new Agentic SOC capabilities at SplunkConf26	Product launch · 2 Oct 2026	2 sources · Also reported independently
Microsoft	Microsoft launches reimagined Copilot with Home, Code and Autopilot capabilities	Product launch · 25 Sep 2026	2 sources · Also reported independently
Mars Security	Mars Security launches Real-Time Intel-to-Detection Engine	Product launch · 8 Sep 2026	2 sources · Also reported independently
Splunk	Splunk rebuilds its platform around agents	Product launch · 15 Sep 2026	1 source · Also reported independently
CrowdStrike	Solarig standardizes on CrowdStrike Falcon platform for security	Customer evidence · 1 Oct 2026	3 sources · Vendor sources only
Spectrum Security	SEP2 doubles detection rule coverage with Spectrum Security	Customer evidence · 3 Sep 2026	3 sources · Vendor sources only
Nebulock	Global software company uses Nebulock for insider risk program	Customer evidence · 25 Sep 2026	2 sources · Vendor sources only
BlinkOps	Coterie Insurance uses BlinkOps for vulnerability alert automation	Customer evidence · 31 Aug 2026	2 sources · Vendor sources only
7AI	DXC Technology runs 7AI across global security operations	Customer evidence · 31 Aug 2026	2 sources · Vendor sources only
Arctic Wolf	CloudHesive adopts Arctic Wolf Aurora Agentic SOC	Customer evidence · 19 Oct 2026	1 source · Vendor sources only
CrowdStrike	Cogentrix Energy uses CrowdStrike Falcon platform	Customer evidence · 16 Oct 2026	1 source · Vendor sources only
Qevlar	Vancord chooses Qevlar AI over building investigation tool in-house	Customer evidence · 14 Oct 2026	1 source · Vendor sources only
7AI	Cole, Scott & Kissane uses 7AI to cut investigation time	Customer evidence · 13 Oct 2026	1 source · Vendor sources only
Torq	EQUANS CISO describes AI-enhanced SOC built with Torq	Customer evidence · 8 Oct 2026	1 source · Vendor sources only
ServiceNow	LTM deploys 1,500 ServiceNow AI agents alongside staff	Customer evidence · 7 Oct 2026	1 source · Vendor sources only
Stellar Cyber	Capgemini Brazil uses Stellar Cyber for AI-driven cyberthreat response	Customer evidence · 30 Sep 2026	1 source · Vendor sources only
Strike48	Tronox uses Strike48 agents for SOC automation	Customer evidence · 29 Sep 2026	1 source · Vendor sources only
Backline AI	Backline AI resolved unfixable vulnerabilities at Fortune 500 chemical manufacturer	Customer evidence · 8 Sep 2026	1 source · Vendor sources only
Method Security	Method Security wins $30M STRATFI award from U.S. Space Force	Customer evidence · 2 Sep 2026	1 source · Vendor sources only
Backline AI	Backline AI cut vulnerability fix time from 5+ weeks to under day for data analytics…	Customer evidence · 1 Sep 2026	1 source · Vendor sources only
Kai Security	Kai Security customer triaged 250 million vulnerabilities in 20 hours	Customer evidence · 1 Sep 2026	1 source · Vendor sources only
Alpha Level	Alpha Level's Alert Refinery clears 57% of incidents for unnamed MDR	Customer evidence · 31 Aug 2026	1 source · Vendor sources only
Exaforce	Exaforce introduced Agentless AI Security for AI agent visibility and control	Product expansion · 15 Sep 2026	3 sources · Vendor sources only
Cantina	Cantina adds Clarion, Connection Panel, Inspector categorization features	Product expansion · 19 Oct 2026	1 source · Vendor sources only
Wirespeed	Wirespeed adds four platform integrations	Product expansion · 14 Oct 2026	1 source · Vendor sources only
Cotool	Cotool adds Opus 5.5, GPT-6 Sol, GPT-6 Luna to model catalog	Product expansion · 12 Oct 2026	1 source · Vendor sources only
NextSOC	NextSOC launches agentic security operations platform	Product expansion · 6 Oct 2026	1 source · Vendor sources only
Arctic Wolf	Arctic Wolf adds 13 new integrations to Aurora Superintelligence Platform	Product expansion · 5 Oct 2026	1 source · Vendor sources only
Cotool	Cotool adds endpoint and cloud investigation reach	Product expansion · 28 Sep 2026	1 source · Vendor sources only
BlinkOps	BlinkOps integrates with Microsoft Sentinel Data Lake	Product expansion · 23 Sep 2026	1 source · Vendor sources only
Spharaka	Spharaka launches Signal for OT and ICS security	Product expansion · 17 Sep 2026	1 source · Vendor sources only
Cotool	Cotool unifies Detection and Response into single Agents workspace	Product expansion · 8 Sep 2026	1 source · Vendor sources only
Wirespeed	Wirespeed added Login Security to Coalition Control platform	Product expansion · 2 Sep 2026	1 source · Vendor sources only
Arctic Wolf	Arctic Wolf partners with Veeam on backup infrastructure security	Partnership · 12 Oct 2026	5 sources · Vendor sources only
Exaforce	Exaforce partners with KDDI America and KDDI Europe	Partnership · 23 Sep 2026	2 sources · Vendor sources only
Method Security	Method Security and Palantir launch Cardinal Program together	Partnership · 10 Sep 2026	2 sources · Vendor sources only
Binalyze	Binalyze partners with DIFOSE to strengthen digital forensics capabilities	Partnership · 16 Oct 2026	1 source · Vendor sources only
Elastic	Elastic partners with Google for Distributed Cloud AI SecOps integration	Partnership · 16 Oct 2026	1 source · Vendor sources only
Kai Security	Kai Security and Protexxa partner to accelerate Autonomous Defense in Canada	Partnership · 15 Oct 2026	1 source · Vendor sources only
CrowdStrike	CrowdStrike collaborated with FBI Cyber Division to disrupt North Korean IT worker scheme	Partnership · 14 Oct 2026	1 source · Vendor sources only
IBM	IBM and MeitY Startup Hub sign MoU for India startups	Partnership · 13 Oct 2026	1 source · Vendor sources only
Wirespeed	Wirespeed integrates with Sublime Security	Partnership · 12 Oct 2026	1 source · Vendor sources only
Torq	Torq and Upwind Security launch native integration	Partnership · 9 Oct 2026	1 source · Vendor sources only
Prophet Security	Prophet Security partners with ExtraHop to integrate NDR data	Partnership · 8 Oct 2026	1 source · Vendor sources only
Stellar Cyber	Stellar Cyber integrates with Check Point for alert correlation	Partnership · 8 Oct 2026	1 source · Vendor sources only
7AI	7AI integrates with Upwind Security	Partnership · 7 Oct 2026	1 source · Vendor sources only
CrowdStrike	CrowdStrike partners with CyberCert for ANZ SMB market	Partnership · 6 Oct 2026	1 source · Vendor sources only
AquilaI	Aquila I goes live with Starburst for security data management	Partnership · 3 Oct 2026	1 source · Vendor sources only
Palo Alto Networks	Cyderes Partners with Palo Alto Networks to Accelerate AI-Powered Security Operations for…	Partnership · 1 Oct 2026	1 source · Vendor sources only
Imperum	Imperum partners with TeamT5 on APAC threat intelligence integration	Partnership · 30 Sep 2026	1 source · Vendor sources only
Intezer	Cyber Fusion Distribution and Intezer partner for UK channel	Partnership · 28 Sep 2026	1 source · Vendor sources only
SentinelOne	SentinelOne partners with NVIDIA on confidential computing for AI governance	Partnership · 28 Sep 2026	1 source · Vendor sources only
AquilaI	Aquila I partners with Virus Rescuers for Middle East cybersecurity	Partnership · 24 Sep 2026	1 source · Vendor sources only
AquilaI	Aquila I partners with Ampcus Cyber for global MSSP services	Partnership · 22 Sep 2026	1 source · Vendor sources only
Rilian	Rilian partners with du for UAE critical infrastructure cybersecurity	Partnership · 16 Sep 2026	1 source · Vendor sources only
Rilian	Rilian partners with Bastazo for OT vulnerability prioritization in Caspian	Partnership · 8 Sep 2026	1 source · Vendor sources only
Fortinet	Fortinet partners with FIRST CORE on cyber resilience	Partnership · 3 Sep 2026	1 source · Vendor sources only
RedCarbon	RedCarbon becomes Armis Technology Partner for device risk enrichment	Partnership · 3 Sep 2026	1 source · Vendor sources only
Cognna	Cognna partners with Google Cloud as first Agentic AI cybersecurity partner in MENA	Partnership · 2 Sep 2026	1 source · Vendor sources only
Rilian	Rilian partners with VulnCheck for exploit intelligence integration	Partnership · 1 Sep 2026	1 source · Vendor sources only
Nebulock	Nebulock launches Detection Versioning for security detections	Product launch · 5 Oct 2026	3 sources · Vendor sources only
Artemis Security	Artemis Security launches Detection as Code feature	Product launch · 15 Oct 2026	2 sources · Vendor sources only
Arctic Wolf	Arctic Wolf launches Aurora Superintelligence Platform and Agentic SOC	Product launch · 14 Oct 2026	2 sources · Vendor sources only
Backline AI	Backline launches feature routing remediation tickets to individuals	Product launch · 14 Oct 2026	2 sources · Vendor sources only
Bricklayer AI	Bricklayer AI launches Agentic Approvals for security action workflows	Product launch · 8 Oct 2026	2 sources · Vendor sources only
Huntbase	Huntbase launches test lake with 1,250+ recorded attacks	Product launch · 8 Oct 2026	2 sources · Vendor sources only
CrowdStrike	CrowdStrike adds Third-Party App Insights and AI-Enhanced Remediation to Falcon Cloud…	Product launch · 5 Oct 2026	2 sources · Vendor sources only
Palo Alto Networks	Palo Alto Networks launches Cortex XCOR AI-driven observability platform	Product launch · 1 Oct 2026	2 sources · Vendor sources only
UnderDefense	UnderDefense introduces MAXI MCP security platform	Product launch · 30 Sep 2026	2 sources · Vendor sources only
Nebulock	Nebulock releases open-source GATES Method framework	Product launch · 28 Sep 2026	2 sources · Vendor sources only
Exaforce	Exaforce launches ExaGo mobile app on App Store and Google Play	Product launch · 24 Sep 2026	2 sources · Vendor sources only
Huntbase	Huntbase opens self-service access to threat hunting platform	Product launch · 22 Sep 2026	2 sources · Vendor sources only
Bricklayer AI	Bricklayer AI launches agent-native data plane for enterprise AI agents	Product launch · 16 Sep 2026	2 sources · Vendor sources only
Tuskira	Tuskira launched Vector autonomous red team agent for attack surfaces	Product launch · 16 Sep 2026	2 sources · Vendor sources only
Bricklayer AI	Bricklayer AI launches Model Context Protocol support	Product launch · 9 Sep 2026	2 sources · Vendor sources only
D3 Security	D3 Security launches Morpheus 2 with graded evidence and narratives	Product launch · 28 Aug 2026	2 sources · Vendor sources only
IBM	IBM introduces vLLM-Hook MIA plugin for AI monitoring	Product launch · 21 Oct 2026	1 source · Vendor sources only
Binalyze	Binalyze releases AIR 5.29 digital forensics platform update	Product launch · 20 Oct 2026	1 source · Vendor sources only
IBM	IBM releases llm-d 1.0 open-source distributed inference framework	Product launch · 20 Oct 2026	1 source · Vendor sources only
Nebulock	Nebulock launches Agentic Cybersecurity Engineering platform	Product launch · 20 Oct 2026	1 source · Vendor sources only
Mars Security	Mars Security launches Co-Hunter Instructions for investigation control	Product launch · 19 Oct 2026	1 source · Vendor sources only
Swimlane	Swimlane launches SentinelOne Scan and Analyze Exposed Credentials Agent	Product launch · 16 Oct 2026	1 source · Vendor sources only
Strike48	Strike48 launches University SOC Program for qualified schools	Product launch · 15 Oct 2026	1 source · Vendor sources only
Elastic	Elastic launches Context Engine, nightshift and AlertZero AI tools	Product launch · 14 Oct 2026	1 source · Vendor sources only
Crogl	Crogl releases version 2.12.1 with faster triage and new connectors	Product launch · 13 Oct 2026	1 source · Vendor sources only
Dropzone AI	Dropzone AI launches hunt packs for parallel threat hunting	Product launch · 13 Oct 2026	1 source · Vendor sources only
Spharaka	Spharaka launches SAGE, a cybersecurity-trained AI model	Product launch · 13 Oct 2026	1 source · Vendor sources only
Torq	Torq launches REV channel partner program for AI SOC	Product launch · 13 Oct 2026	1 source · Vendor sources only
Imperum	Imperum launches Cognitio threat actor intelligence capability	Product launch · 12 Oct 2026	1 source · Vendor sources only
Microsoft	Microsoft puts Azure Maia 200 AI chip into production	Product launch · 12 Oct 2026	1 source · Vendor sources only
Splunk	Splunk ships Enterprise Security 8.7	Product launch · 12 Oct 2026	1 source · Vendor sources only
Rapid7	Rapid7 releases Metasploit Framework 6.5.6	Product launch · 9 Oct 2026	1 source · Vendor sources only
Simbian	Simbian launches AI SIEM to augment existing SIEM infrastructure	Product launch · 7 Oct 2026	1 source · Vendor sources only
UnderDefense	UnderDefense launches MAXI Service Desk with named analyst access	Product launch · 5 Oct 2026	1 source · Vendor sources only
Rapid7	Rapid7 launches Rapid7 Intelligence, unified threat intel and vulnerability engine	Product launch · 2 Oct 2026	1 source · Vendor sources only
Cylerian	Cylerian's Cyra agent automates platform tasks via chat	Product launch · 1 Oct 2026	1 source · Vendor sources only
Spharaka	Spharaka launches Sphere On-Premises with local AI reasoning	Product launch · 1 Oct 2026	1 source · Vendor sources only
Splunk	Splunk releases Cloud Platform 10.6 and Enterprise 10.6	Product launch · 1 Oct 2026	1 source · Vendor sources only
Anvilogic	Anvilogic launches Enterprise Security Graph for SOC AI agents	Product launch · 30 Sep 2026	1 source · Vendor sources only
Google SecOps	Google introduces Gemini 4 Argon frontier intelligence model	Product launch · 30 Sep 2026	1 source · Vendor sources only
Huntbase	Huntbase launches with 152 hunts, now 207	Product launch · 30 Sep 2026	1 source · Vendor sources only
Mars Security	Mars Security launches Alert Hunts for cross-tool alert investigation	Product launch · 30 Sep 2026	1 source · Vendor sources only
Splunk	Splunk releases AI Assistant v2 with Agent Mode	Product launch · 30 Sep 2026	1 source · Vendor sources only
Beacon Security	Beacon Security integrates with Claude's Compliance API	Product launch · 29 Sep 2026	1 source · Vendor sources only
Cantina	Cantina launches The Brain, shared memory for its agents	Product launch · 29 Sep 2026	1 source · Vendor sources only
IBM	IBM and Yotta launch sovereign agentic AI platform for Indian organizations	Product launch · 29 Sep 2026	1 source · Vendor sources only
SentinelOne	SentinelOne launches Claude Compliance API integration for prompt security	Product launch · 29 Sep 2026	1 source · Vendor sources only
AiStrike	AiStrike launches AiStrike for Insider Threat	Product launch · 28 Sep 2026	1 source · Vendor sources only
Spectrum Security	Spectrum Security launches Detection Health to find broken rules	Product launch · 22 Sep 2026	1 source · Vendor sources only
Cylerian	Cylerian releases open-source red team attack datasets for SOC testing	Product launch · 17 Sep 2026	1 source · Vendor sources only
Mars Security	Mars Security launches MARS Playbooks for codified investigations	Product launch · 16 Sep 2026	1 source · Vendor sources only
Detections AI	detections.ai launches Nightwatch for detections.ai Enterprise	Product launch · 15 Sep 2026	1 source · Vendor sources only
Cotool	Cotool ships Serval and Lumos integrations, redesigned agent editor	Product launch · 14 Sep 2026	1 source · Vendor sources only
SentinelOne	SentinelOne launches agentic investigation capability for SOCs	Product launch · 11 Sep 2026	1 source · Vendor sources only
Imperum	Imperum launches Virtus Cerebrum, a private SOC AI brain	Product launch · 7 Sep 2026	1 source · Vendor sources only
Intezer	Intezer launches Amplify Hub for partner program	Product launch · 2 Sep 2026	1 source · Vendor sources only
Cantina	Cantina's Clarion now reads Claude Code telemetry and tracks MCP servers	Product launch · 31 Aug 2026	1 source · Vendor sources only
Mate Security	Mate Security hires Alon Bitton as Head of Finance	Executive appointment · 12 Oct 2026	1 source · Vendor sources only
Kai Security	Kai Security hires Kristi Evans as VP of Revenue Marketing	Executive appointment · 9 Oct 2026	1 source · Vendor sources only
Kai Security	Kai Security hires Thomas N. as VP of Product Marketing	Executive appointment · 18 Sep 2026	1 source · Vendor sources only
VigilBase	VigilBase hires Daniel Kabucho as Head of Sales for Africa	Executive appointment · 14 Sep 2026	1 source · Vendor sources only
Mate Security	Mate hires Noam Bar-Lev as Director of Brand and AI Marketing	Executive appointment · 9 Sep 2026	1 source · Vendor sources only
Mate Security	Mate hires Kirra Rice as Founding Channel Leader	Executive appointment · 31 Aug 2026	1 source · Vendor sources only
Elastic	Elastic: headcount shrank from 8508 to 5230	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
Google SecOps	Google SecOps (Google): headcount grew from 297958 to 330447	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
Rapid7	Rapid7: headcount shrank from 6683 to 3313	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
Secure.com	Secure.com: headcount grew from 43 to 52	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
SentinelOne	SentinelOne: headcount shrank from 3642 to 2997	Headcount change · measured 14 Oct 2026	0 sources · Vendor sources only
Mate Security	Mate Security: headcount shrank from 76 to 68	Headcount change · measured 30 Sep 2026	0 sources · Vendor sources only
BEYON Cyber	BEYON Cyber: headcount grew from 64 to 72	Headcount change · measured 23 Sep 2026	0 sources · Vendor sources only
Mave	Mave: headcount grew from 20 to 22	Headcount change · measured 9 Sep 2026	0 sources · Vendor sources only
PRE Security	PRE Security: headcount shrank from 37 to 33	Headcount change · measured 9 Sep 2026	0 sources · Vendor sources only
Rilian	Rilian: headcount grew from 33 to 37	Headcount change · measured 9 Sep 2026	0 sources · Vendor sources only
Detections AI	Detections AI (was System Two Security): System Two Security: headcount grew from 6 to 16	Headcount change · measured 2 Sep 2026	0 sources · Vendor sources only
7AI	7AI: 38 open roles	Hiring · this period	1 source · Vendor sources only
Artemis Security	Artemis Security: 23 open roles	Hiring · this period	1 source · Vendor sources only
BlinkOps	BlinkOps: 9 open roles	Hiring · this period	1 source · Vendor sources only
Daylight Security	Daylight Security: 12 open roles	Hiring · this period	1 source · Vendor sources only
Dropzone AI	Dropzone AI: 12 open roles	Hiring · this period	1 source · Vendor sources only
Kai Security	Kai Security: 18 open roles	Hiring · this period	1 source · Vendor sources only
Method Security	Method Security: 9 open roles	Hiring · this period	1 source · Vendor sources only
Nebulock	Nebulock: 5 open roles	Hiring · this period	1 source · Vendor sources only
Prophet Security	Prophet Security: 5 open roles	Hiring · this period	1 source · Vendor sources only
Qevlar	Qevlar: 22 open roles	Hiring · this period	1 source · Vendor sources only
Stellar Cyber	Stellar Cyber: 17 open roles	Hiring · this period	1 source · Vendor sources only
TENEX.AI	TENEX.AI: 43 open roles	Hiring · this period	1 source · Vendor sources only
Twine Security	Twine Security: 5 open roles	Hiring · this period	1 source · Vendor sources only
Variance	Variance (was Intrinsic): 9 open roles	Hiring · this period	1 source · Vendor sources only
Wraithwatch	Wraithwatch: 6 open roles	Hiring · this period	1 source · Vendor sources only

What this says about the market

Market formation

Most of the market is new: 67 of the 115 vendors with a known founding year were founded in 2023 or later.

Founding year known for 115 of 117 vendors.

Products versus customers

Product news outweighs customer announcements. Of 140 developments, 83 were product launches or expansions, 29 partnerships and 18 customer or deployment announcements.

Concentration

Activity is spread rather than concentrated: the three vendors hiring most hold 40% of 262 open roles (TENEX.AI alone 16%); the three most active accounts published 11% of 2683 vendor posts; the three best-funded vendors hold 46% of disclosed funding; three vendors account for 12% of 140 developments.

Job listings exist for 29 of 117 vendors; funding is disclosed for 55 of 117.

Developments

RSS24 July–22 October 2026

5,778 records collected → 166 developments

Funding

StrikeReady raises funding led by Wa'ed Ventures

Total funding reaches $29M with Hitachi Ventures, 33N, Monta Vista and Wa'ed participating.

StrikeReady · 16 Sep 2026 · 2 sources · Also reported independently

More: the company's LinkedIn post

Social: @thedatatechtimes.bsky.social on Bluesky

Product expansion

Stellar Cyber releases 7.0 with AI case triage and APIs

Stellar Cyber 7.0 unifies AI-powered case triage, SOC workflows, investigative evidence, automated response and new APIs.

Stellar Cyber · 5 Oct 2026 · 5 sources · Reported by multiple independent sources

More: helpnetsecurity.com, the company's LinkedIn post

Social: @hacker.at.thenote.app on Bluesky, @shah_sheikh on X, @blackhatnews.tokyo on Bluesky

Acquisition

Leidos Security Enterprise Solutions and Analogic close acquisition deal

New U.S.-based company combines capabilities to strengthen global security screening.

Leidos · 5 Oct 2026 · 1 source · Vendor sources only

Vendor	Disclosed total	Last round
Arctic Wolf	$900M	Convertible Note
Torq	$332M	Series D
TENEX.AI	$277M	Series B
Swimlane	$204M	Private Equity
7AI	$202M	Series A
Exaforce	$201M	Series B
BlinkOps	$90M	Series B
Anvilogic	$85M	Series C
Artemis Security	$70M	—
Sekoia	$65M	Series B

AWS & Crowdstrike Cybersecurity Accelerator	Arcanna.ai, Backline AI, Bricklayer AI, Sevii, Simbian
Accel	CrowdStrike, Legion Security, Prophet Security
Andreessen Horowitz	Command Zero, Method Security, TENEX.AI
Bain Capital Ventures	Nebulock, Prophet Security, Rapid7
Employee Stock Option Fund	CrowdStrike, Elastic, Exabeam
Evolution Equity Partners	Anvilogic, Backline AI, Torq
Icon Ventures	Exabeam, Palo Alto Networks, Simbian
Lightspeed Venture Partners	Arctic Wolf, BlinkOps, Exabeam
Blue Owl Capital Corporation	Arctic Wolf, Exabeam
Bright Pixel Capital	Arctic Wolf, Sekoia
Cisco Investments	Binalyze, Exabeam
Citi Ventures	Binalyze, Prophet Security
Crosspoint Capital Partners	Command Zero, TENEX.AI
Decibel Partners	Dropzone AI, Nebulock
Dreamit Ventures	AiStrike, Bricklayer AI
DTCP	Arctic Wolf, TENEX.AI
Frederic Kerrest	Detections AI (was System Two Security), Method Security
General Catalyst	Andesite, Method Security
Greylock	7AI, Palo Alto Networks
Index Ventures	7AI, Elastic
Insight Partners	Command Zero, Torq
Intel Capital	Intezer, Tuskira
IQT	Dropzone AI, Nebulock
Kleiner Perkins	Google SecOps (Google), Mandiant (Google)
Norwest	Exabeam, Intezer

7AI	+0.0%	178 → 178
AISOC	+0.0%	1 → 1
AiStrike	+0.0%	54 → 54
Almanax	+0.0%	2 → 2
Alpha Level	+0.0%	9 → 9
Andesite	+0.0%	57 → 57

Vendor	Posts	Reactions/post	Mentions by others
7AI	101	33.0	27
Kai Security	100	27.0	0
Torq	88	72.1	24
Strike48 (A Devo company)	69	16.5	8
Eventus Security	69	21.5	5
Exaforce	62	30.1	30
D3 Security	60	16.8	1
Wirespeed	60	12.5	1
Anvilogic	52	15.5	1
Arctic Wolf	51	24.8	13
HawkEye	51	36.5	0
Secure.com	49	9.9	4
Conifers AI	49	8.1	0
Mate Security	48	132.1	41
CrowdStrike	48	111.5	6
Artemis Security	46	64.7	12
Tuskira	43	20.8	6
Imperum	41	23.9	0
Prophet Security	39	41.7	8
Camelot Secure	38	10.7	0

Account	Who	Platform	Posts	Reactions	Latest post
@anton_chuvakin	Vendor staff (Cisco Secure) · Dr. Anton Chuvakin · 41,897 followers Dr. Anton Chuvakin is a veteran cybersecurity expert specializing in SIEM, DFIR, EDR, and AI security. He currently works at Cisco Secure and previously held…	twitter	58	993	2026-10-20
@opsmatters.com	OpsMatters · 407 followers OpsMatters is a content platform and publication covering modern operations, technology, and cybersecurity topics. They aggregate and publish curated articles…	bluesky	22	11	2026-10-22
@hacker.at.thenote.app	Hacker & Security News · 1,209 followers A news aggregation and curation account that republishes cybersecurity, hacking, and tech news from sources like Hacker News, LifeHacker, and Security…	bluesky	17	6	2026-10-21
@WebLinkr	WebLinkr WebLinkr appears to be a content curator or discussion facilitator focused on cybersecurity and zero trust architecture topics. They highlight AI-driven…	reddit	16	25	2026-10-20
@arc-codex.com	Ross Nesbitt · 553 followers Ross Nesbitt is a webmaster and cloud enthusiast who shares and critiques diverse online articles and research across security, science, and technology topics.…	bluesky	15	4	2026-10-17
@torq_io	Vendor (Torq) · Torq · 1,967 followers Torq is an AI-powered SOC platform company that automates threat triage, investigation, and response for enterprises. Their official account promotes their…	twitter	14	16	2026-10-09
@blackhatnews.tokyo	blackhatnews.tokyo · 90 followers A Japanese-language security news aggregator that translates and reports on overseas cybersecurity developments, with particular focus on AI-enabled security…	bluesky	14	0	2026-10-20
@thenewstack.io	The New Stack · 1,794 followers The New Stack is a technology news and analysis publication covering software development, deployment, and infrastructure at scale. They produce news articles…	bluesky	9	7	2026-10-06
@CIOInfluence	CIO Influence · 426 followers CIO Influence is a technology news and analysis publication covering IT leadership, Big Data, and emerging technologies. They publish news about AI in security…	twitter	8	0	2026-10-14
@newsen.bsky.social	Thiard News@F4F · 1,230 followers Thiard News is a news distribution account that publishes press release-based content across multiple industries and markets. The account covers technology…	bluesky	8	0	2026-10-19
@cognna	Vendor (Cognna) · COGNNA · 726 followers COGNNA is a cybersecurity vendor offering AI-driven security operations and threat detection solutions. They focus on enterprise security, compliance, identity…	twitter	7	4	2026-10-18
@exabeam	Vendor (Exabeam) · Exabeam · 5,398 followers Exabeam is a vendor providing behavior intelligence and AI-powered security analytics solutions for enterprise security operations. They position themselves as…	twitter	7	1	2026-10-20
@hendryadrian.bsky.social	Cybersecurity News Everyday · 248 followers Cybersecurity News Everyday is a threat intelligence and security news aggregator that monitors ransomware incidents, vulnerability disclosures, and emerging…	bluesky	6	1	2026-10-21
@splunk	Vendor (Splunk) · Splunk · 78,162 followers Splunk is the official account for Splunk, a unified security and observability platform vendor. They post about their products, features, partnerships, and…	twitter	5	63	2026-10-02
@cotoolai	Vendor (Cotool) · Cotool · 502 followers Cotool is an AI security company developing composable AI agents for security operations centers (SOCs). They build tools like AI Router for model selection…	twitter	5	44	2026-10-20
@theXSSrat	The XSS Rat - Proud XSS N00b :-) · 168,370 followers The XSS Rat is a bug bounty hunter and cybersecurity educator who teaches offensive security methodologies, CTF (Capture The Flag) training, and practical…	twitter	5	37	2026-10-01
@_cybersecurity_	_cybersecurity_ A cybersecurity-focused account that analyzes trends, tools, and threats in the security operations center (SOC) space, including AI-driven security platforms…	reddit	5	14	2026-10-13
@_c0c0n_	c0c0n2026 · 3,184 followers c0c0n is a community-driven 8-day hacking and cybersecurity conference held annually since 2008, hosting the 19th edition in October 2026 in Kochi, Kerala. The…	twitter	5	12	2026-10-13
@AWNetworks	Vendor (Arctic Wolf) · Arctic Wolf · 4,618 followers Arctic Wolf is a cybersecurity vendor offering managed detection and response (MDR) and security operations center (SOC) services, with a focus on AI-driven…	twitter	5	10	2026-10-14
@techintelpro	TechIntelPro · 23 followers TechIntelPro is a technology content platform that publishes news and analysis about enterprise technology trends, cybersecurity, and AI. They create…	twitter	5	4	2026-10-19

Vendor	Status	Country	Founded	LinkedIn headcount	Disclosed funding	Developments, 90d	Open roles	Latest development
IBM	Changed	United States	1911	344894	Undisclosed	4	0	2026-10-21
Binalyze	Changed	Estonia	2018	99	$30M	2	2	2026-10-20
Nebulock	Changed	United States	2023	60	$6M	5	5	2026-10-20
Arctic Wolf	Changed	United States	2012	3300	$900M	5	0	2026-10-19
Cantina	Changed	United States	2023	312	$16M	3	0	2026-10-19
Mars Security	Changed	United States	2025	24	Undisclosed	4	1	2026-10-19
CrowdStrike	Changed	United States	2011	11981	Undisclosed	6	0	2026-10-16
Elastic	Changed	United States	2012	5230	Undisclosed	4	0	2026-10-16
Swimlane	Changed	United States	2014	272	$204M	1	0	2026-10-16
Artemis Security	Changed	United States	2025	62	$70M	3	23	2026-10-15
Kai Security	Changed	United States	2025	87	Undisclosed	5	18	2026-10-15
Backline AI	Changed	United States	2024	25	$9M	3	0	2026-10-14
Qevlar	Changed	France	2023	89	$45M	2	22	2026-10-14
Rapid7	Changed	United States	2000	3313	Undisclosed	3	0	2026-10-14
SentinelOne	Changed	United States	2013	2997	Undisclosed	5	0	2026-10-14
Trellix	Changed	United States	2022	3754	Undisclosed	1	0	2026-10-14
7AI	Changed	United States	2024	178	$202M	4	38	2026-10-13
Crogl	Changed	United States	2023	41	$30M	1	4	2026-10-13
Dropzone AI	Changed	United States	2023	89	$57M	2	12	2026-10-13
Spharaka	Changed	India	2025	15	Undisclosed	3	0	2026-10-13
Torq	Changed	United States	2020	473	$332M	4	0	2026-10-13
Cotool	Changed	United States	2025	9	$7M	4	0	2026-10-12
Imperum	Changed	Netherlands	2021	22	Bootstrapped	3	0	2026-10-12
Mate Security	Changed	Israel	2025	74	$50M	4	0	2026-10-12
Microsoft	Changed	United States	1975	231136	Undisclosed	2	0	2026-10-12
Bricklayer AI	Changed	United States	2023	41	$8M	3	0	2026-10-08
Huntbase	Changed	United Kingdom	2024	6	$1M	3	0	2026-10-08
Prophet Security	Changed	United States	2024	94	$41M	3	5	2026-10-08
Stellar Cyber	Changed	United States	2015	147	$46M	4	17	2026-10-08
ServiceNow	Changed	United States	2004	34845	Undisclosed	1	0	2026-10-07
Simbian	Changed	United States	2023	67	$10M	1	1	2026-10-07
NextSOC	Changed	—	2026	2-10 employees	Undisclosed	1	0	2026-10-06
Leidos	Changed	United States	1969	37343	Undisclosed	1	0	2026-10-05
UnderDefense	Changed	United States	2017	134	Undisclosed	2	0	2026-10-05
AquilaI	Changed	India	2020	104	Bootstrapped	3	0	2026-10-03
Intezer	Changed	United States	2016	89	$60M	3	0	2026-10-02
Cylerian	Changed	United States	2018	24	Undisclosed	2	0	2026-10-01
Exabeam	Changed	United States	2013	773	Undisclosed	2	0	2026-10-01
Palo Alto Networks	Changed	United States	2005	23805	Undisclosed	2	0	2026-10-01
Anvilogic	Changed	United States	2019	109	$85M	1	1	2026-09-30
Beacon Security	Changed	Israel	2024	25	$13M	1	0	2026-09-29
AiStrike	Changed	United States	2023	54	$7M	1	0	2026-09-28
Exaforce	Changed	United States	2023	144	$201M	3	0	2026-09-24
BlinkOps	Changed	United States	2021	130	$90M	3	9	2026-09-23
Spectrum Security	Changed	United States	2025	19	Undisclosed	2	0	2026-09-22
Rilian	Changed	United States	2024	35	Undisclosed	4	3	2026-09-16
StrikeReady	Changed	United States	2019	74	$12M	1	0	2026-09-16
Tuskira	Changed	United States	2024	48	$28M	1	0	2026-09-16
VigilBase	Changed	United Arab Emirates	2025	3	Undisclosed	1	0	2026-09-14
Method Security	Changed	United States	2023	31	$26M	3	9	2026-09-10
Fortinet	Changed	United States	2000	16739	Undisclosed	1	0	2026-09-03
RedCarbon	Changed	Italy	2020	22	$3M	1	1	2026-09-03
Cognna	Changed	Saudi Arabia	2022	70	$11M	1	2	2026-09-02
Alpha Level	Changed	United States	2023	9	$1M	1	0	2026-08-31
D3 Security	Changed	Canada	2012	156	$10M	1	4	2026-08-28
Detections AI (was System Two Security)	Changed	United States	2023	17	$7M	0	0	—
Google SecOps (Google)	Changed	United States	1998	330447	Undisclosed	0	0	—
Splunk (Cisco)	Changed	United States	2003	8422	Undisclosed	0	0	—
Strike48 (A Devo company)	Changed	United States	2026	63	Undisclosed	0	0	—
Secure.com	No change	United Arab Emirates	2024	52	$4M	1	0	2026-10-14
PRE Security	No change	United States	2023	30	$7M	1	0	2026-09-09
AISOC	No change	United Kingdom	2024	1	Undisclosed	0	0	—
Andesite	No change	United States	2023	57	$38M	0	4	—
Arambh Labs	No change	United States	2024	10	Undisclosed	0	0	—
Arcanna.ai	No change	United States	2019	24	$5M	0	0	—
CipherData	No change	United States	2023	11	Undisclosed	0	0	—
Command Zero	No change	United States	2021	40	$45M	0	0	—
Conifers AI	No change	United States	2024	44	$25M	0	2	—
CounterShadow	No change	United Kingdom	2024	8	Undisclosed	0	0	—
Daylight Security	No change	Israel	2024	80	$40M	1	12	—
DeepTempo	No change	United States	2023	26	Undisclosed	0	0	—
Elezar	No change	Australia	2024	4	Undisclosed	0	0	—
Embed Security	No change	United States	2024	16	$6M	0	0	—
Eventus Security	No change	Singapore	2017	289	Undisclosed	0	0	—
Fig Security	No change	United States	2025	47	$38M	0	1	—
FlintX	No change	United States	2025	8	Undisclosed	0	0	—
HarkX	No change	India	2026	6	Undisclosed	0	0	—
HawkEye	No change	United Arab Emirates	2011	116	Undisclosed	0	0	—
HoundBytes	No change	Romania	2022	13	Undisclosed	0	0	—
Joon	No change	Israel	2025	25	Undisclosed	0	0	—
Legion Security	No change	United States	2024	78	$38M	0	0	—
Louie AI	No change	United States	2014	9	Undisclosed	0	0	—
Miru Labs	No change	United States	2024	10	$3M	0	0	—
Nua	No change	Saudi Arabia	2021	30	Undisclosed	0	0	—
Priam Cyber AI	No change	United Kingdom	2019	12	$3M	0	0	—
Redblock	No change	United States	2023	16	Undisclosed	0	1	—
SOC Jedi.ai	No change	United States	2024	5	Undisclosed	0	0	—
SecsphereSOC	No change	India	2003	18	Undisclosed	0	0	—
Seculyze	No change	DK	—	10	Undisclosed	0	0	—
Securaa	No change	United States	—	57	Undisclosed	0	0	—
Sekoia	No change	France	2022	177	$65M	0	0	—
Sevii	No change	United States	2024	27	Undisclosed	0	0	—
Sleuth Kit Labs	No change	United States	2023	11	Bootstrapped	0	0	—
Spacewalk AI	No change	United States	2024	14	Undisclosed	0	0	—
TandemTrace	No change	Spain	2024	9	Undisclosed	0	0	—
TechBridge Consultancy Services	No change	India	2016	118	Undisclosed	0	0	—
Tenacium	No change	United Kingdom	2021	25	Undisclosed	0	0	—
Threatlens	No change	United States	2023	7	Undisclosed	0	0	—
Tier4ai	No change	United States	2024	10	Undisclosed	0	0	—
Tracecat	No change	United States	2024	8	$2M	0	2	—
Twine Security	No change	Israel	2024	50	$12M	1	5	—
Variance (was Intrinsic)	No change	United States	2022	20	$26M	0	9	—
Vinci Logic	No change	France	2025	2-10 employees	Undisclosed	0	0	—
VisionHeight	No change	United States	2025	9	Undisclosed	0	0	—
WiseBee	No change	United States	2025	15	$2M	0	0	—
Wraithwatch	No change	United States	2023	16	$8M	1	6	—
guarddog	No change	United States	2019	20	$3M	0	0	—
BEYON Cyber	Incomplete	Bahrain	2022	76	Undisclosed	1	0	2026-09-23
Mave	Incomplete	Israel	2025	23	Undisclosed	1	0	2026-09-09
Almanax	Incomplete	United States	2024	2	$2M	0	0	—
Camelot Secure	Incomplete	United States	2022	31	Undisclosed	0	0	—
HTCD	Incomplete	United States	2023	11	Undisclosed	0	0	—
Mandiant (Google)	Incomplete	United States	2004	1492	Undisclosed	0	0	—
SOCAI	Incomplete	Spain	—	—	Undisclosed	0	0	—
SOCNova	Incomplete	Turkey	2026	7	Undisclosed	0	0	—
TENEX.AI	Incomplete	United States	2024	201	$277M	1	43	—
Tencyle	Incomplete	Israel	2023	15	Undisclosed	0	0	—
Wirespeed	—	United States	—	5	Undisclosed	4	0	2026-10-14
Radiant Security	—	United States	2021	39	$15M	0	0	—

Source	State	Eligible	Configured	Attempted	Collected	Notes
Company posts (LinkedIn)	checked	118 / 117	118	118	118
Company profiles and headcount (LinkedIn)	checked	118 / 117	118	118	118
Job listings (LinkedIn)	checked	118 / 117	118	118	118
Funding stages, investors and scores (Crunchbase)	some vendors checked	114 / 117	114	111	111	we checked 111 of the 114 vendors we have a way to look up
Vendor site updates (vendor website / RSS)	some vendors checked	119 / 117	119	90	90	we checked 90 of the 119 vendors we have a way to look up
Finding a vendor's feed (vendor website)	checked	119 / 117	119	119	119
Job listings (the company's own hiring system)	checked	20 / 117	20	20	20
Finding a vendor's hiring system (vendor website)	some vendors checked	119 / 117	119	118	118	we checked 118 of the 119 vendors we have a way to look up

Coverage	Vendors	%
Being watched	117 / 117	100%
We have seen something from	117 / 117	100%
Posting on LinkedIn in the period	116 / 119	97%
Crunchbase profile read	91 / 114	80%
Have public job listings	29 / 117	25%

What	Published on	We get it from	Whose words
Company posts	LinkedIn	Bright Data	vendor-owned
Company profiles and headcount	LinkedIn	Bright Data	vendor profile
Job listings	LinkedIn	Bright Data	vendor-associated
Job listings (experimental)	Indeed	Bright Data	vendor-associated; we have not yet checked that every listing is the vendor's own
Practitioner discussion	X (Twitter), Reddit, TikTok and Instagram	Xpoz	third-party (earned)
Practitioner discussion	Bluesky	Bluesky (direct)	third-party (earned)
Employee reviews	Glassdoor	OpenWebNinja	third-party (current and former staff)
News	the publication itself	configured news/RSS feeds	third-party (earned)
Vendor site updates	vendor website / RSS	site and RSS collector	vendor-owned
Job listings	the company's own hiring system	the hiring system's public job board API	vendor-associated
Finding a vendor's hiring system	vendor website	site collector	vendor-owned
Finding a vendor's feed	vendor website	site and RSS collector	vendor-owned
Funding and ownership	PitchBook	Bright Data	third-party company data
Company profile and contacts	ZoomInfo	Bright Data	third-party company data
Funding stages, investors and scores	Crunchbase	Bright Data	third-party company data
Disclosed funding totals	imported workbook	operator import	third-party company data

AI in the SOC Market Maturity Map

Executing (15) — the largest vendors: scale of 75 and over

Scaling (29) — scale from 50 to 75

Building (35) — scale from 25 to 50

Emerging (18) — the smallest vendors: scale under 25

Accelerating (17) — momentum of 67 and over

Growing (58) — momentum from 33 to 67

Holding (22) — momentum under 33

Innovating (35) — top third by launches, corroborated launches, research posts and engineering hiring; a marker across every tier

Hiring (13) — top third by open roles per 100 staff, with at least 3 roles open; a marker across every tier

Raised in the last year (27) — a round dated inside the last 365 days, from the vendor's own post, a matched news event or the Crunchbase news list

Acquired (3) — on the record, not on the map

Pivoted (1) — left this market for another; on the record, not on the map

Large incumbents (19) — in this market, but too large to compare on size; listed, not on the map

Executive assessment

2 acquisitions among the vendors we track.

New funding for StrikeReady, Prophet Security.

Customer announcements from CrowdStrike, Spectrum Security, Nebulock, BlinkOps and 9 more.

59 of 117 vendors had a development.

Weekly briefing

AI in the SOC — Week of 2026-09-14

Vendors with a development

What this says about the market

Market formation

Products versus customers

Concentration

Developments

StrikeReady raises funding led by Wa'ed Ventures

Stellar Cyber releases 7.0 with AI case triage and APIs

Leidos Security Enterprise Solutions and Analogic close acquisition deal

Coalition acquired Wirespeed for millisecond threat response capability

Prophet Security raises strategic investment from Amex and Citi Ventures

Strike48 launches on-prem agentic SOC appliance for air-gapped deployments

Intezer revenue triples as enterprise AI security expands

SentinelOne extends Wayfinder coverage across endpoints, identities, and cloud workloads

Inside CrowdStrike’s Move To Secure Enterprise Agentic AI

Torq partners with Merlin Cyber for federal AI SOC modernization

CSCO, NVDA Stock Inch Higher — Cisco And Nvidia Expand Partnership To Bring Agentic AI To Splunk Customers

Exabeam releases October 2026 New-Scale platform update

Trellix Redefines Cyber Defense for the AI Era

Artemis Security launches Orion-1 frontier model for cyber defense

Elastic’s AlertZero puts AI agents to work on security alert overload

Arctic Wolf launches SwarmView for AI investigation visibility

Exabeam adds Agentic SOC capabilities to New-Scale platform

Splunk introduces new Agentic SOC capabilities at SplunkConf26

Microsoft launches reimagined Copilot with Home, Code and Autopilot capabilities

Mars Security launches Real-Time Intel-to-Detection Engine

Splunk rebuilds its platform around agents

Solarig standardizes on CrowdStrike Falcon platform for security

SEP2 doubles detection rule coverage with Spectrum Security

Global software company uses Nebulock for insider risk program

Coterie Insurance uses BlinkOps for vulnerability alert automation

DXC Technology runs 7AI across global security operations

CloudHesive adopts Arctic Wolf Aurora Agentic SOC

Cogentrix Energy uses CrowdStrike Falcon platform

Vancord chooses Qevlar AI over building investigation tool in-house

Cole, Scott & Kissane uses 7AI to cut investigation time

EQUANS CISO describes AI-enhanced SOC built with Torq

LTM deploys 1,500 ServiceNow AI agents alongside staff

Capgemini Brazil uses Stellar Cyber for AI-driven cyberthreat response

Tronox uses Strike48 agents for SOC automation

Backline AI resolved unfixable vulnerabilities at Fortune 500 chemical manufacturer

Method Security wins $30M STRATFI award from U.S. Space Force

Backline AI cut vulnerability fix time from 5+ weeks to under day for data analytics platform

Kai Security customer triaged 250 million vulnerabilities in 20 hours

Alpha Level's Alert Refinery clears 57% of incidents for unnamed MDR

Exaforce introduced Agentless AI Security for AI agent visibility and control

Cantina adds Clarion, Connection Panel, Inspector categorization features

Wirespeed adds four platform integrations

Cotool adds Opus 5.5, GPT-6 Sol, GPT-6 Luna to model catalog

NextSOC launches agentic security operations platform

Arctic Wolf adds 13 new integrations to Aurora Superintelligence Platform

Cotool adds endpoint and cloud investigation reach

BlinkOps integrates with Microsoft Sentinel Data Lake

Spharaka launches Signal for OT and ICS security

Cotool unifies Detection and Response into single Agents workspace

Wirespeed added Login Security to Coalition Control platform

Arctic Wolf partners with Veeam on backup infrastructure security

Exaforce partners with KDDI America and KDDI Europe

Method Security and Palantir launch Cardinal Program together