Market News and Trends for AI in the SOC
Week of 12–18 Oct · ranked by momentum on the Market Maturity Map: headcount change, hiring, launches and partnerships, earned mentions and the vendor's own posts over 90 days.
7AI23 earned mentions, 21 open roles per 100 staff, raised Series A, Aug 2026Last week 1 · Peak 1 · Momentum 851185
Detections AI (was System Two Security)Headcount +183%, 16 earned mentionsLast week 2 · Peak 2 · Momentum 842284
Exaforce15 launches and partnerships, 22 earned mentionsLast week 3 · Peak 1 · Momentum 833183
Prophet Security7 launches and partnerships, 8 earned mentionsLast week 7 · Peak 4 · Momentum 797479
Secure.comHeadcount +53%, 5 launches and partnershipsLast week 5 · Peak 3 · Momentum 795379
Daylight Security15 open roles per 100 staff, headcount +14%Last week 6 · Peak 4 · Momentum 796479
Nebulock9 launches and partnerships, headcount +28%Last week 4 · Peak 4 · Momentum 794479
Dropzone AI15 open roles per 100 staff, 10 earned mentionsLast week 8 · Peak 8 · Momentum 788878
Artemis Security24 open roles per 100 staff, 12 earned mentionsLast week 10 · Peak 4 · Momentum 7810478
Kai Security22 open roles per 100 staff, headcount +28%Last week 9 · Peak 3 · Momentum 769376
Bricklayer AI15 launches and partnershipsLast week 18 · Peak 11 · Momentum 74181174
Cognna6 earned mentions, 3 open roles per 100 staffLast week 22 · Peak 12 · Momentum 73221273
Mate Security40 earned mentions, headcount +12%, raised Seed, Jul 2026Last week 16 · Peak 3 · Momentum 7216372
Method Security29 open roles per 100 staff, headcount +19%Last week 12 · Peak 12 · Momentum 71121271
Spharaka13 earned mentions, 4 launches and partnershipsLast week 17 · Peak 15 · Momentum 70171570
Stellar Cyber13 earned mentions, 12 open roles per 100 staffLast week 15 · Peak 15 · Momentum 67151567
Tuskira8 launches and partnerships, 6 earned mentionsLast week 11 · Peak 11 · Momentum 66111166
Crogl12 open roles per 100 staff, 7 earned mentionsLast week 14 · Peak 2 · Momentum 6614266
Qevlar20 open roles per 100 staff, 5 earned mentionsLast week 19 · Peak 16 · Momentum 65191665
Twine SecurityHeadcount +19%, 10 open roles per 100 staffLast week 23 · Peak 20 · Momentum 64232064
Legion Security5 earned mentionsLast week 20 · Peak 14 · Momentum 64201464
Anvilogic11 launches and partnerships, 1 open role per 100 staffLast week 13 · Peak 10 · Momentum 64131064
Binalyze8 launches and partnerships, 2 open roles per 100 staffLast week 32 · Peak 23 · Momentum 64322364
HuntbaseHeadcount +50%, 6 launches and partnershipsLast week 24 · Peak 24 · Momentum 62242462
ThreatlensHeadcount +17%Last week 40 · Peak 17 · Momentum 62401762
VigilBaseHeadcount +50%Last week 25 · Peak 12 · Momentum 61251261
Fig Security5 launches and partnershipsLast week 21 · Peak 12 · Momentum 60211260
CantinaLast week 26 · Peak 26 · Momentum 60262660
Mars Security4 open roles per 100 staff, 4 launches and partnershipsLast week 30 · Peak 23 · Momentum 60302360
Rilian4 launches and partnershipsLast week 27 · Peak 13 · Momentum 60271360
Cylerian6 launches and partnershipsLast week 28 · Peak 20 · Momentum 58282058
Cotool8 launches and partnerships, 5 earned mentionsLast week 35 · Peak 32 · Momentum 58353258
Intezer16 earned mentions, 7 launches and partnershipsLast week – · Peak 26 · Momentum 55–2655
Wraithwatch38 open roles per 100 staffLast week 39 · Peak 24 · Momentum 55392455
SeviiLast week 38 · Peak 31 · Momentum 55383155
UnderDefenseLast week – · Peak 36 · Momentum 53–3653
Spectrum SecurityLast week – · Peak 35 · Momentum 53–3553
AquilaILast week – · Peak 38 · Momentum 53–3853
Camelot Secure4 launches and partnershipsLast week – · Peak 32 · Momentum 53–3253
Eventus Security7 earned mentionsLast week – · Peak 40 · Momentum 52–4052Week of 12–18 Oct · ranked by momentum on the Market Maturity Map: headcount change, hiring, launches and partnerships, earned mentions and the vendor's own posts over 90 days.
7AI23 earned mentions, 21 open roles per 100 staff, raised Series A, Aug 2026Last week – · Peak 1 · Momentum 85–185Detections AI (was System Two Security)Headcount +183%, 16 earned mentionsLast week – · Peak 2 · Momentum 84–284Exaforce15 launches and partnerships, 22 earned mentionsLast week – · Peak 3 · Momentum 83–383Prophet Security7 launches and partnerships, 8 earned mentionsLast week – · Peak 4 · Momentum 79–479Secure.comHeadcount +53%, 5 launches and partnershipsLast week – · Peak 5 · Momentum 79–579Daylight Security15 open roles per 100 staff, headcount +14%Last week – · Peak 6 · Momentum 79–679Nebulock9 launches and partnerships, headcount +28%Last week – · Peak 7 · Momentum 79–779Dropzone AI15 open roles per 100 staff, 10 earned mentionsLast week – · Peak 8 · Momentum 78–878Artemis Security24 open roles per 100 staff, 12 earned mentionsLast week – · Peak 9 · Momentum 78–978
Google SecOps (Google)19 earned mentions, headcount +11%Last week – · Peak 10 · Momentum 77–1077Kai Security22 open roles per 100 staff, headcount +28%Last week – · Peak 11 · Momentum 76–1176Bricklayer AI15 launches and partnershipsLast week – · Peak 12 · Momentum 74–1274Cognna6 earned mentions, 3 open roles per 100 staffLast week – · Peak 13 · Momentum 73–1373Mate Security40 earned mentions, headcount +12%, raised Seed, Jul 2026Last week – · Peak 14 · Momentum 72–1472Method Security29 open roles per 100 staff, headcount +19%Last week – · Peak 15 · Momentum 71–1571Spharaka13 earned mentions, 4 launches and partnershipsLast week – · Peak 16 · Momentum 70–1670Stellar Cyber13 earned mentions, 12 open roles per 100 staffLast week – · Peak 17 · Momentum 67–1767Tuskira8 launches and partnerships, 6 earned mentionsLast week – · Peak 18 · Momentum 66–1866Crogl12 open roles per 100 staff, 7 earned mentionsLast week – · Peak 19 · Momentum 66–1966
Palo Alto Networks5 launches and partnerships, 5 earned mentionsLast week – · Peak 20 · Momentum 65–2065Qevlar20 open roles per 100 staff, 5 earned mentionsLast week – · Peak 21 · Momentum 65–2165Twine SecurityHeadcount +19%, 10 open roles per 100 staffLast week – · Peak 22 · Momentum 64–2264Legion Security5 earned mentionsLast week – · Peak 23 · Momentum 64–2364Anvilogic11 launches and partnerships, 1 open role per 100 staffLast week – · Peak 24 · Momentum 64–2464Binalyze8 launches and partnerships, 2 open roles per 100 staffLast week – · Peak 25 · Momentum 64–2564
CrowdStrike18 launches and partnerships, 6 earned mentionsLast week – · Peak 26 · Momentum 63–2663HuntbaseHeadcount +50%, 6 launches and partnershipsLast week – · Peak 27 · Momentum 62–2762ThreatlensHeadcount +17%Last week – · Peak 28 · Momentum 62–2862VigilBaseHeadcount +50%Last week – · Peak 29 · Momentum 61–2961
Arctic Wolf14 launches and partnerships, 13 earned mentionsLast week – · Peak 30 · Momentum 61–3061Fig Security5 launches and partnershipsLast week – · Peak 31 · Momentum 60–3160
Exabeam42 earned mentions, 8 launches and partnershipsLast week – · Peak 32 · Momentum 60–3260CantinaLast week – · Peak 33 · Momentum 60–3360Mars Security4 open roles per 100 staff, 4 launches and partnershipsLast week – · Peak 34 · Momentum 60–3460Rilian4 launches and partnershipsLast week – · Peak 35 · Momentum 60–3560Cylerian6 launches and partnershipsLast week – · Peak 36 · Momentum 58–3658Cotool8 launches and partnerships, 5 earned mentionsLast week – · Peak 37 · Momentum 58–3758
Splunk (Cisco)129 earned mentions, 11 launches and partnershipsLast week – · Peak 38 · Momentum 58–3858
Torq21 earned mentions, 5 launches and partnershipsLast week – · Peak 39 · Momentum 58–3958
FortinetLast week – · Peak 40 · Momentum 58–4058
Two-person team automates ~7 hours weekly, runs 32 SOAR workflows, cut cyber insurance 45% saving ~$300,000 over three years.
CrowdStrike · 16 Oct 2026 · 1 source · Vendor sources only
Live on 4 November 2026 at 9:00 PST. Karthik Kannan and Oliver Rochford discuss the decoupled SIEM and why it matters as AI agents take on more security operations work. They cover how to give agents governed, auditable access to data and tools spread across SIEMs, data lakes and cloud platforms, while analysts keep control of the decisions that matter.
Anvilogic · Register for the webinar →
MDR providers want to take investigations further before handing them off, and incident response providers want recurring work between major incidents. Both are moving towards the same service: continuous investigation built on evidence from the affected systems. The piece looks at what that means for service providers, and where the formal incident response boundary still matters.
Binalyze · Read the article →
Security data is spread across platforms, and consolidating it all into one SIEM is slow and expensive. A decoupled architecture gives AI agents governed, auditable access to the data and tools a SOC already runs, so they can take on recurring workflows across them. The paper sets out the decoupling models and what each means for cost, governance and portability.
Anvilogic · Read the whitepaper →Leidos acquired Analogic on 5 October. Coalition, Inc. acquired Wirespeed on 17 September.
StrikeReady raised a new round led by Wa'ed Ventures on 16 September. StrikeReady says it has raised $29M in total. Prophet Security raised a strategic round; the amount is not stated on 8 October.
18 customer or deployment announcements, 13 of them naming the customer.
140 developments in 90 days, plus 26 hiring or headcount signals. The 3 most active vendors account for 12% of them (CrowdStrike 6, Splunk 6, Arctic Wolf 5). 48 vendors were watched and had none. 10 are not fully collected yet.
Analysis and notes written by the Cyberfuturists team.
CrowdStrike used Fal.Con this week to make the agentic SOC a feature of Falcon. Nine months earlier, in December 2025, 7AI raised a 130 million dollar Series A, the largest Series A in the AI SOC market. The platforms are absorbing the category while…
Deals, funding, partnerships, leadership changes, contract awards, and incidents such as breaches or lawsuits.
Binalyze announced a strategic technical services partnership with DIFOSE to strengthen its digital forensics capabilities.
Binalyze · 16 Oct 2026 · 1 source · Vendor sources onlyElastic Security integrates into Google Distributed Cloud AI SecOps for air-gapped AI-driven threat detection.
Elastic · 16 Oct 2026 · 1 source · Vendor sources only
Kai Security works with Protexxa and will host a CISO dinner in Toronto on October 21st.
Kai Security · 15 Oct 2026 · 1 source · Vendor sources only
The operation dismantled more than 40 laptop farms and seized nearly 200 devices.
CrowdStrike · 14 Oct 2026 · 1 source · Vendor sources onlyDeals and launches by companies outside the vendor list, from news coverage or reported by two or more accounts.
The offering features multi-agent AI investigations across endpoint, identity, and SaaS domains simultaneously.
CrowdStrike · 2 Sep 2026 · 4 sources · Reported by multiple independent sourcesThe AI-powered security operations center offering includes automated remediation and third-party integrations.
Microsoft 365 E5 and E7 customers receive free tenant-specific cost evaluations for Microsoft's ISOC plus seven AI-powered MXDR365 agents and playbooks for 24/7 operations.
New products, and expansions of existing ones.
New plugin lets developers inspect and modify AI generation processes with minimal delay.
IBM · 21 Oct 2026 · 1 source · Vendor sources onlyAdds improved large file uploads, redesigned Organization Dashboard, relay-aware deployment links, and faster Investigation Hub data transfers.
Binalyze · 20 Oct 2026 · 1 source · Vendor sources onlyEnables reliable, cost-effective serving of large AI models on enterprise infrastructure.
IBM · 20 Oct 2026 · 1 source · Vendor sources onlyUnifies threat hunting, detection engineering, insider risk, and alert triage in AI workflows.
Nebulock · 20 Oct 2026 · 1 source · Vendor sources onlyVendors with 5 or more open roles, and LinkedIn headcount changes of 10% or more.
262 open roles; 29 of 117 vendors have public job listings.
TENEX.AI7AIArtemis SecurityQevlarKai SecurityCustomer stories and deployments, whether or not the vendor names the customer.
CloudHesive reported 50% fewer alerts requiring triage and 99% faster investigation-to-remediation after adopting Arctic Wolf.
Arctic Wolf · 19 Oct 2026 · 1 source · Vendor sources onlyTwo-person team automates ~7 hours weekly, runs 32 SOAR workflows, cut cyber insurance 45% saving ~$300,000 over three years.
CrowdStrike · 16 Oct 2026 · 1 source · Vendor sources onlyCustomer cited token economics, technical debt, and model maintenance as deciding factors.
Qevlar · 14 Oct 2026 · 1 source · Vendor sources onlyOpinion and research from vendors and researchers that is not about a specific announcement.
What practitioners are saying on X, Bluesky, Reddit and LinkedIn, newest first, and the most shared posts.
Reports in which analyst firms have named vendors, and the firms' own public posts. The reports are behind paywalls; every item links to its source.
By the Cyberfuturists
made using AunooAI in the SOC · 24 July–22 October 2026 · About · Privacy · Consensus · Three horizonsSend us a story about AI in the SOC that is not here, tell us your company belongs on the list. We read everything; what goes on the page is our call.
Everything here is open to read. If you want the data in your own tools, through our MCP server or an export, ask about data access.
Choosing a product in this market? Advisory helps buyers build a shortlist, test vendor claims and plan a proof of concept.
Rapid7