AI in the SOC — Week of 2026-09-14

## 1. What Happened

Product Launches and Updates

Multiple vendors announced new capabilities or product versions during the week.

Exaforce introduced "Exaforce Agentless AI Security," first noting on 16 September that the product would be introduced on Tuesday, then confirming on 15 September that it was available with runtime visibility and control of AI agents and applications from endpoint to cloud. [A6, A23]

D3 Security announced Morpheus 2 on 17 September. [A9]

Torq announced Torq Auto Triage on 14 September, positioning it against "verdict-and-done" approaches that forget context when closing tickets. [A33]

Cylerian released datasets for SOC testing, stating its platform runs against itself six times daily and the data was being made available for others to run against their own SOCs. [A7]

Tuskira shipped Vector, an autonomous red team agent, on 16 September. [A15]

Bricklayer AI launched its Agent-Native Data Plane on 16 September, citing data problems in multi-agent AI systems as the motivation. [A17]

Cotool shipped Serval and Lumos integrations on 14 September, enabling agent interaction with users, groups, and access requests, plus a redesigned agent editor. [A29]

Spharaka Networks described its Spharaka Signal product on 17 September for industrial environments where downtime is unaffordable. [A13]

Imperum announced Virtus Sentinel availability on 17 September. [A12]

Mars Security introduced MARS Playbooks on 16 September. [A21]

Intezer announced a major milestone on 16 September, noting a revenue milestone and four product launches without specifying amounts or names. [A20]

System Two Security announced Nightwatch for detections.ai Enterprise on 15 September. [A24]

Funding

StrikeReady announced a $29 million investment round on 16 September, led by Wa'ed Ventures, the venture capital arm of Aramco. The company now states total funding of $29 million. [A19]

An additional press release on 16 September from globenewswire.com carried the same announcement. [C58]

Recognition

Gartner recognition appeared repeatedly in vendor claims. Arambh Labs stated on 18 September that Gartner named it one of 11 startups to watch in agentic AI. [A3] Torq stated on 15 September that Gartner named it "the Company to Beat in AI SOC Agents for Threat Investigation (August 2026)." [A27]

Research and Methodology Publications

Several vendors published research findings or methodological positions.

Simbian released open-source benchmark findings on 17 September regarding LLMs that sometimes refuse to perform tasks. [A8]

Cantina published benchmark results on 17 September on AI-generated patches, specifically noting Microsoft had to release another update to fix broken remote desktop features after their security patch. [A10]

Prophet Security published aggregate findings on 16 September from customer environments, stating its AI SOC Analyst investigated every alert in customer environments last fiscal quarter. [A14]

Nebulock published a threat hunting methodology on 16 September, noting that most threat hunting assumes an adversary on the other end. [A16]

SOCNova published a threat intelligence report on 15 September regarding web server-focused intrusion activities targeting institutions in Türkiye. [A26]

Customer and Named Use Cases

HarkX described a named customer use case on 18 September, stating a leading financial services firm received a phishing message through Microsoft Teams from an unknown external user. [A4]

Anvilogic cited SAP on 17 September as a named customer, specifically stating "SAP kept Splunk." [A11]

Cantina claimed on 14 September that its autonomous pentester achieved number 1 on HackerOne's US leaderboard. [A30]

Partnerships and Market Expansion

Rilian and du announced a partnership on 16 September, noting day one at GISEC GLOBAL. [A18]

RedCarbon stated on 14 September that its UK office was open, indicating market expansion. [A28]

Workforce Changes

Kai Security announced Thomas N. joined as VP Product Marketing on 18 September. [A1] The same day, its CEO was named in a Top 10 Women list, with Kai citing women as 22% of the cybersecurity workforce and 16% of CISO seats. [A2]

Vigilbase announced Daniel Kabucho joined as Head of Sales for Africa on 14 September. [A31]

Mars Security announced Aaron Mog joined as an employee on 14 September, describing his background in building detection programs. [A32]

Headcount data showed increases at Torq (470 to 478, 1.7%), Mate Security (69 to 74, 7.2%), Eventus Security (274 to 278, 1.5%), Nebulock (49 to 53, 8.2%), 7ai (160 to 162, 1.2%), Dropzone AI (79 to 81, 2.5%), and exaforce (133 to 135, 1.5%). D3 Security decreased from 157 to 155 (-1.3%). Open job listings showed 7ai with 77 positions, Torq with 53, Kai Security with 29, Qevlar with 20, Nebulock with 16, and Dropzone AI, Crogl, and Artemis Security each with 13.

Acquisitions

Wirespeed announced on 17 September that it was acquired by Coalition, Inc. [A5]

Platform Vendor Moves in Third-Party Coverage

Third-party coverage noted several platform vendor activities. Zscaler unveiled an "Agentic SOC" on 15 September, according to multiple Bluesky posts and trade coverage. [C14, C22, C23, C24] A Futurum article on 18 September described Zscaler's bet on telemetry over model horsepower. [C29]

Arctic Wolf launched Aurora MDR Connect on 16 September to bring enterprise-grade agentic SOC capabilities to MSPs, per a Bluesky post. [C4]

Splunk was described in multiple posts as expanding its Agentic SOC Workforce with new purpose-built skills across detection, investigation, response, and governance. [C18, C79]

A Cisco-Nvidia partnership expansion to bring agentic AI to Splunk customers was noted on 15 September. [C34]

ServiceNow's approach to AI-speed attacks through consolidation was examined in a diginomica article on 18 September. [C26]

Analyst and Trade Commentary

Third-party coverage included market commentary on platform versus specialist dynamics. Articles alleged the SOAR category is being subsumed, with titles including "The SOAR Is Dead. Long Live the AI SOC: A Buyer's Guide" from Securaa on 14 September [C49] and "Why MSSPs Are Moving Away from Licensed SIEM" from techbullion on 18 September. [C53]

Bricklayer AI published a positioning piece on 15 September stating "CrowdStrike Validated the Agentic SOC. Bricklayer Provides the Harness." [C56]

Eventus Security urged decision-centric SOCs at an AI summit, per securitybrief.in on 15 September. [C50]

Google was cited on 18 September warning that AI is reshaping cyber attacks and defenses. [C51] A separate article on 19 September stated Gemini AI hacked three companies during a cybersecurity test. [C57]

Coverage from analyticsinsight.net on 17 September examined why AI is forcing companies to rethink network defense. [C54]

Quiet on Expected Fronts

No funding rounds were announced for AI SOC pure-plays beyond StrikeReady's $29 million. No platform vendor made AI SOC-specific acquisitions during the period. No vendor in this registry published measured outcomes data comparing AI-led versus human-led SOC performance with specific metrics.

2. What It Suggests About the Market

Signal on Agentic SOC Definition

The volume of launches using "agentic" terminology without consistent capability descriptions suggests the category remains definitionally contested. Vendors are attaching the term to: autonomous triage (Torq), red teaming (Tuskira), data planes for multi-agent systems (Bricklayer), agentless runtime visibility (Exaforce), and playbooks (Mars Security). This fragmentation supports the concern that "AI SOC" and "agentic SOC" are experiencing definitional inflation, making vendor sorting difficult for buyers.

Platform Pressure Confirmed but Not Terminal

Zscaler's Agentic SOC launch and Splunk's workforce expansion, combined with Cisco-Nvidia partnership movement, indicate platform vendors are actively colonizing the positioning space that standalone AI SOC vendors occupy. However, the simultaneous presence of 33 vendor announcements and 80 third-party coverage items suggests standalone specialists still command attention and distribution. The market is not yet showing platform absorption at the expense of specialist viability.

The Bricklayer AI framing—"CrowdStrike Validated the Agentic SOC. Bricklayer Provides the Harness"—explicitly acknowledges platform validation while claiming a specialist role in implementation. This suggests a possible market structure where platforms define the category and specialists capture complexity that platforms cannot address.

Funding Consolidation Still Sparse

Only one funding event in 33 vendor announcements, and that from a Saudi Aramco-linked source for StrikeReady, suggests investor caution in the AI SOC category remains pronounced. The absence of announced raises for better-known names like Torq, Dropzone AI, or others with open job listings indicates either undisclosed rounds, delayed announcements, or a funding environment where runway preservation takes priority over growth capital.

Analyst Trust and Explainability: Unaddressed

No vendor in this period published technical documentation on model explainability, decision provenance, or audit mechanisms for autonomous SOC actions. Prophet Security's aggregate findings and Cylerian's dataset release touch on transparency, but neither addresses the core concern of how buyers can defend AI SOC decisions to regulators or auditors. This gap persists despite EU AI Act and NIS2 compliance pressures that would logically demand such documentation.

Workforce Expansion Versus Efficiency Claims

The headcount growth at multiple vendors (Mate Security +7.2%, Nebulock +8.2%) alongside product launches positions them as scaling organizations, but no vendor reconciled this growth with the efficiency narrative that AI SOCs promise. This tension—growing teams while selling automation—remains unaddressed in public communications.

3. What We Still Do Not Know

• Measured outcomes: No vendor published specific metrics comparing AI-led and human-led SOC performance in production environments. Claims of investigation coverage (Prophet Security: "every alert in customer environments last fiscal quarter") lack precision on false positive rates, mean time to contain, or analyst hour reduction.

• Pricing and commercial traction: No vendor disclosed pricing models, customer counts, or annual recurring revenue figures. Intezer cited a revenue milestone without numbers.

• Platform absorption mechanics: Whether Zscaler's Agentic SOC and similar platform moves are displacing standalone vendor evaluations, or expanding the total addressable market, is unmeasured.

• EU AI Act compliance paths: No vendor documentation addressed how autonomous SOC decisions map to high-risk AI system requirements, human oversight mandates, or audit trails specified in EU AI Act implementation timelines.

• Workforce displacement versus augmentation: The 77 open positions at 7ai and 53 at Torq suggest growth, but we do not know whether these replace SOC analyst roles at customers or augment vendor development capacity.

• Sovereign and air-gapped deployments: Exotech's expansion in Saudi Arabia was noted in third-party coverage, but whether AI SOC vendors generally can operate without cloud dependencies remains unverified across the registry.

• Data quality flags: 15 low and 8 medium data_quality flags, plus 1 ambiguous_identity flag, indicate coverage gaps that may affect vendor assessments. Specific vendors affected are not identified in available data.

References

[A6] exaforce — "Exaforce: 🎉 On Tuesday, 𝘄𝗲 𝗶𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗲𝗱 𝗘𝘅𝗮𝗳𝗼𝗿𝗰𝗲 𝗔𝗴𝗲𝗻𝘁𝗹𝗲𝘀𝘀 𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆." — https://www.linkedin.com/posts/exaforce_aisecurity-cybersecurity-enterpriseai-activity-7506437231146897408-w1DQ [A23] exaforce — "Exaforce: 🎊 Today, we are excited to announce Exaforce Agentless AI Security: Runtime visibility and control of AI agents and applications from endpoint to cloud." — https://www.linkedin.com/posts/exaforce_aisecurity-cybersecurity-soc-activity-7505677821831254016-WkhA [A9] D3 Security — "D3 Security: INTRODUCING MORPHEUS 2" — https://www.linkedin.com/posts/d3-security-management-systems_introducing-morpheus-2-weve-launched-some-activity-7506384481210007552-ZCuN [A33] Torq — "Torq: Verdict-and-done triage forgets everything the second it closes a ticket." — https://www.linkedin.com/posts/torqio_verdict-and-done-triage-forgets-everything-activity-7505256586668490752-PHUo [A7] Cylerian — "Cylerian: We run the platform we sell against ourselves, six times a day and we're releasing the datasets so you can run them against your own SOC." — https://www.linkedin.com/posts/cylerian_detectionengineering-aisoc-purpleteam-activity-7506418388550696960-12ol [A15] Tuskira — "Tuskira: Someone relaxes a WAF rule during an incident." — https://www.linkedin.com/posts/tuskira_someone-relaxes-a-waf-rule-during-an-incident-activity-7506030288548868096-xrKV [A17] Bricklayer AI — "Bricklayer AI: Multi-agent AI systems have a data problem." — https://www.linkedin.com/posts/bricklayerai_cybersecurity-aiagents-agenticsoc-activity-7506020683978625024-eDIi [A29] Cotool — "Cotool: This week Cotool shipped Serval and Lumos integrations so agents can interact with users, groups, and access requests, plus a redesigned agent editor that puts the prompt front and center." — https://www.linkedin.com/posts/cotool-ai_this-week-cotool-shipped-serval-and-lumos-activity-7505283953130430464-YOMD [A13] Spharaka — "Spharaka Networks: Industrial environments cannot afford downtime." — https://www.linkedin.com/posts/spharaka_spharaka-spharakasignal-otsecurity-activity-7506211662312673280-jlaR [A12] Imperum — "Imperum: 🥁 Introducing Virtus Sentinel🥁" — https://www.linkedin.com/posts/imperumio_imperum-virtus-sentinel-ai-detection-enforcement-activity-7506215508799737856-I_Gt [A21] Mars Security — "Mars Security: 🚨 PRODUCT UPDATE: Introducing MARS Playbooks 🚨" — https://www.linkedin.com/posts/marssec_product-update-introducing-mars-playbooks-activity-7505948076197629952-A0Ip [A20] Intezer — "Intezer: 📈 Announcing a major milestone." — https://www.linkedin.com/posts/intezer-labs_announcing-a-major-milestone-intezer-activity-7505981894342283265--9-Z [A24] System Two Security — "detections.ai: Announcing Nightwatch for detections.ai Enterprise." — https://www.linkedin.com/posts/detectionsai_announcing-nightwatch-for-detectionsai-enterprise-activity-7505651338891132929-NUg1 [A19] StrikeReady — "StrikeReady: StrikeReady is excited to share our new investment round led by the venture capital arm of Aramco, Wa'ed Ventures." — https://www.linkedin.com/posts/strikeready_strikeready-is-excited-to-share-our-new-investment-activity-7505983340500537346-IYPf [C58] globenewswire.com — "StrikeReady Announces Investment Led by Wa'ed Ventures to Power Unmetered AI Security Operations" — https://www.globenewswire.com/fr/news-release/2026/09/16/3362865/0/en/strikeready-announces-investment-led-by-wa-ed-ventures-to-power-unmetered-ai-security-operations.html [A3] Arambh Labs — "Arambh Labs: Gartner named us one of 11 startups to watch in agentic AI." — https://www.linkedin.com/posts/arambhlabs_gartner-named-us-one-of-11-startups-to-watch-activity-7506701971467288576-_TiQ [A27] Torq — "Torq: Gartner® named Torq the Company to Beat in AI SOC Agents for Threat Investigation (August 2026)." — https://www.linkedin.com/posts/torqio_gartner-named-torq-the-company-to-beat-in-activity-7505581344903819264-UsME [A8] Simbian — "Simbian: OPEN SOURCE—sounds great, until the model refuses to do the job." — https://www.linkedin.com/posts/simbian_register-for-the-event-activity-7506389044717617152-gJnr [A10] Cantina — "Cantina: Microsoft had to release another update to fix some broken remote desktop features after their security patch." — https://www.linkedin.com/posts/cantinasecurity_microsoft-had-to-release-another-update-to-activity-7506359250521350144-1kjq [A14] Prophet Security — "Prophet Security: When Prophet AI SOC Analyst investigated every alert in customer environments last fiscal quarter, there were a few aggregate findings our security operations team felt were worth bubbling up." — https://www.linkedin.com/posts/prophetsecurity_q3-2026-quarterly-threat-report-findings-activity-7506047832131530752-RwtH [A16] Nebulock — "Nebulock: Most threat hunting assumes an adversary on the other end." — https://www.linkedin.com/posts/nebulock-inc_most-threat-hunting-assumes-an-adversary-activity-7506026760321384448-DMAL [A26] SOCNova — "SOCNova: Türkiye'deki Kurumları Hedefleyen Web Sunucu Odaklı Sızma Faaliyetine yönelik İstihbarat ekibimizin raporu" — https://tr.linkedin.com/posts/socnova-ai_socnova-tehditistihbaratiraporu-sn-ti-2026-activity-7505586298414628864-G9hQ [A4] HarkX — "HarkX: A leading financial services firm received a phishing message through Microsoft Teams from an unknown external user." — https://www.linkedin.com/posts/harkx_inside-a-harkx-investigation-activity-7506639852269051905-JVqw [A11] Anvilogic — "Anvilogic: SAP kept Splunk." — https://www.linkedin.com/posts/anvilogic_agenticsecops-siem-securityoperations-activity-7506351357256220672-NaOs [A30] Cantina — "Cantina: We'll take the number 1 spot on HackerOne's US leaderboard with our autonomous pentester." — https://www.linkedin.com/posts/cantinasecurity_well-take-the-number-1-spot-on-hackerones-activity-7505279863705178113-jifQ [A18] Rilian — "Rilian: Day one at GISEC GLOBAL is in the books." — https://www.linkedin.com/posts/riliantech_day-one-at-gisec-global-is-in-the-books-activity-7506012523230330880-jsod [A28] RedCarbon — "RedCarbon: UK: open" — https://www.linkedin.com/posts/redcarbon_redcarbon-aisoc-cybersecurity-activity-7505528862181621760-M41C [A1] Kai Security — "Kai: Attackers operate at machine speed, while the teams defending against them are still evaluating tools built for human speed." — https://www.linkedin.com/posts/kai-security_attackers-operate-at-machine-speed-while-activity-7506834525709172737-pXRO [A2] Kai Security — "Kai: Women are 22% of the cybersecurity workforce and hold 16% of CISO seats." — https://www.linkedin.com/posts/kai-security_women-are-22-of-the-cybersecurity-workforce-activity-7506702244881358850-mM8N [A31] VigilBase — "Vigilbase: Daniel Kabucho has joined Vigilbase as Head of Sales for Africa." — https://www.linkedin.com/posts/vigilbase_daniel-kabucho-has-joined-vigilbase-as-head-activity-7505278148725538816-3SYT [A32] Mars Security — "Mars Security: Aaron Mog has spent his career building detection programs." — https://www.linkedin.com/posts/marssec_aaron-mog-has-spent-his-career-building-detection-activity-7505264312232554497-3S6Y [A5] Wirespeed — "Wirespeed ⚡️: Coalition, Inc." — https://www.linkedin.com/posts/wirespeedsecurity_coalition-inc-acquired-us-for-our-ability-activity-7506472611816689667-fiYu [C14] Bluesky — "Zscaler Unveils New AI-Driven Threat Protection 'Agentic SOC' #AI #Cybersecurity #Zscaler" — https://bsky.app/profile/new3rd.bsky.social/post/3mvjob32wbn2w [C22] Bluesky — "Zscaler Announces 'Zscaler Agentic SOC' to Contain AI-Driven Threats | Infoseek News" — https://bsky.app/profile/yayafa.bsky.social/post/3mvkokm4mkj2g [C23] Bluesky — "Zscaler Agentic SOC: The Innovation in AI-Driven Security Operations – VOIX https://www.yayafa.com/2887887/ Zscaler's AI-Driven Threat Prevention..." — https://bsky.app/profile/yayafa.bsky.social/post/3mvldsgp25u2g [C24] Bluesky — "Zscaler Announces 'Agentic SOC' – Detecting and Responding to Threats at Machine Speed – ZDNET Japan https://www.yayafa.com/2889287/ U.S. Zscaler announced on U.S. time, September 9..." — https://bsky.app/profile/yayafa.bsky.social/post/3mvpw7hfuk42y [C29] Futurum — "Zscaler Launches Agentic SOC, Betting on Telemetry Over Model Horsepower" — https://futurumgroup.com/insights/zscaler-launches-agentic-soc-betting-on-telemetry-over-model-horsepower/?utm_source=rss&utm_medium=rss&utm_campaign=zscaler-launches-agentic-soc-betting-on-telemetry-over-model-horsepower [C4] Bluesky — "@arc-codex.com: Arctic Wolf Launches Aurora MDR Connect, Helping MSPs Bring the Benefits of the Enterprise-Grade Aurora Agentic SOC to More Customers, Faster" — https://bsky.app/profile/arc-codex.com/post/3mvntv2x4t52u [C18] Bluesky — "@sipirtu.com: Splunk is expanding its Agentic SOC Workforce to combat AI-led attacks and enable autonomous defence at machine speed" — https://bsky.app/profile/sipirtu.com/post/3mvoimllozv2i [C79] X — "Splunk is expanding its Agentic SOC Workforce with a set of new purpose-built skills, across detection, investigation, response, & governance, while expanding the value across our core portfolio to strengthen and democratize the agentic SOC for every org: https://t.co/L4KHltvIzx https://t.co/ZRtO3jV" — https://x.com/abhilashm2005/status/2100382051413152185 [C34] newsable.asianetnews.com — "CSCO, NVDA Stock Inch Higher — Cisco And Nvidia Expand Partnership To Bring Agentic AI To Splunk Customers" — https://newsable.asianetnews.com/markets/csco-nvda-stock-inch-higher-cisco-and-nvidia-expand-partnership-to-bring-agentic-ai-to-splunk-customers-articleshow-0anbhb2 [C26] diginomica.com — "ServiceNow's answer to AI-speed attacks will sound familiar - consolidate the mess" — https://diginomica.com/servicenows-answer-ai-speed-attacks-will-sound-familiar-consolidate-mess [C49] Securaa — "The SOAR Is Dead. Long Live the AI SOC: A Buyer’s Guide" — https://securaa.io/the-soar-is-dead-long-live-the-ai-soc-a-buyers-guide/ [C53] techbullion.com — "Why MSSPs Are Moving Away from Licensed SIEM" — https://techbullion.com/why-mssps-are-moving-away-from-licensed-siem/ [C56] Bricklayer AI — "CrowdStrike Validated the Agentic SOC. Bricklayer Provides the Harness." — https://www.bricklayer.ai/insights/crowdstrike-validated-agentic-soc-bricklayer-harness/ [C50] securitybrief.in — "Eventus Security urges decision-centric SOCs at AI summit" — https://securitybrief.in/story/eventus-security-urges-decision-centric-socs-at-ai-summit [C51] securitybrief.in — "Google warns AI is reshaping cyber attacks & defences" — https://securitybrief.in/story/google-warns-ai-is-reshaping-cyber-attacks-defences [C57] digit.in — "Google says Gemini AI hacked three companies during cybersecurity test, here is how" — https://www.digit.in/news/general/google-says-gemini-ai-hacked-three-companies-during-cybersecurity-test-here-is-how.html [C54] analyticsinsight.net — "Why AI Is Forcing Companies to Rethink the Way They Defend Their Networks" — https://www.analyticsinsight.net/artificial-intelligence/why-ai-is-forcing-companies-to-rethink-the-way-they-defend-their-networks

References

1. A6 exaforce — Exaforce: 🎉 On Tuesday, 𝘄𝗲 𝗶𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗲𝗱 𝗘𝘅𝗮𝗳𝗼𝗿𝗰𝗲 𝗔𝗴𝗲𝗻𝘁𝗹𝗲𝘀𝘀 𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆. https://www.linkedin.com/posts/exaforce_aisecurity-cybersecurity-enterpriseai-activity-7506437231146897408-w1DQ
2. A23 exaforce — Exaforce: 🎊 Today, we are excited to announce Exaforce Agentless AI Security: Runtime visibility and control of AI agents and applications from endpoint to cloud. https://www.linkedin.com/posts/exaforce_aisecurity-cybersecurity-soc-activity-7505677821831254016-WkhA
3. A9 D3 Security — D3 Security: INTRODUCING MORPHEUS 2 https://www.linkedin.com/posts/d3-security-management-systems_introducing-morpheus-2-weve-launched-some-activity-7506384481210007552-ZCuN
4. A33 Torq — Torq: Verdict-and-done triage forgets everything the second it closes a ticket. https://www.linkedin.com/posts/torqio_verdict-and-done-triage-forgets-everything-activity-7505256586668490752-PHUo
5. A7 Cylerian — Cylerian: We run the platform we sell against ourselves, six times a day and we're releasing the datasets so you can run them against your own SOC. https://www.linkedin.com/posts/cylerian_detectionengineering-aisoc-purpleteam-activity-7506418388550696960-12ol
6. A15 Tuskira — Tuskira: Someone relaxes a WAF rule during an incident. https://www.linkedin.com/posts/tuskira_someone-relaxes-a-waf-rule-during-an-incident-activity-7506030288548868096-xrKV
7. A17 Bricklayer AI — Bricklayer AI: Multi-agent AI systems have a data problem. https://www.linkedin.com/posts/bricklayerai_cybersecurity-aiagents-agenticsoc-activity-7506020683978625024-eDIi
8. A29 Cotool — Cotool: This week Cotool shipped Serval and Lumos integrations so agents can interact with users, groups, and access requests, plus a redesigned agent editor that puts the prompt front and center. https://www.linkedin.com/posts/cotool-ai_this-week-cotool-shipped-serval-and-lumos-activity-7505283953130430464-YOMD
9. A13 Spharaka — Spharaka Networks: Industrial environments cannot afford downtime. https://www.linkedin.com/posts/spharaka_spharaka-spharakasignal-otsecurity-activity-7506211662312673280-jlaR
10. A12 Imperum — Imperum: 🥁 Introducing Virtus Sentinel🥁 https://www.linkedin.com/posts/imperumio_imperum-virtus-sentinel-ai-detection-enforcement-activity-7506215508799737856-I_Gt
11. A21 Mars Security — Mars Security: 🚨 PRODUCT UPDATE: Introducing MARS Playbooks 🚨 https://www.linkedin.com/posts/marssec_product-update-introducing-mars-playbooks-activity-7505948076197629952-A0Ip
12. A20 Intezer — Intezer: 📈 Announcing a major milestone. https://www.linkedin.com/posts/intezer-labs_announcing-a-major-milestone-intezer-activity-7505981894342283265--9-Z
13. A24 System Two Security — detections.ai: Announcing Nightwatch for detections.ai Enterprise. https://www.linkedin.com/posts/detectionsai_announcing-nightwatch-for-detectionsai-enterprise-activity-7505651338891132929-NUg1
14. A19 StrikeReady — StrikeReady: StrikeReady is excited to share our new investment round led by the venture capital arm of Aramco, Wa'ed Ventures. https://www.linkedin.com/posts/strikeready_strikeready-is-excited-to-share-our-new-investment-activity-7505983340500537346-IYPf
15. C58 StrikeReady Announces Investment Led by Wa'ed Ventures to Power Unmetered AI Security Operations https://www.globenewswire.com/fr/news-release/2026/09/16/3362865/0/en/strikeready-announces-investment-led-by-wa-ed-ventures-to-power-unmetered-ai-security-operations.html
16. A3 Arambh Labs — Arambh Labs: Gartner named us one of 11 startups to watch in agentic AI. https://www.linkedin.com/posts/arambhlabs_gartner-named-us-one-of-11-startups-to-watch-activity-7506701971467288576-_TiQ
17. A27 Torq — Torq: Gartner® named Torq the Company to Beat in AI SOC Agents for Threat Investigation (August 2026). https://www.linkedin.com/posts/torqio_gartner-named-torq-the-company-to-beat-in-activity-7505581344903819264-UsME
18. A8 Simbian — Simbian: OPEN SOURCE—sounds great, until the model refuses to do the job. https://www.linkedin.com/posts/simbian_register-for-the-event-activity-7506389044717617152-gJnr
19. A10 Cantina — Cantina: Microsoft had to release another update to fix some broken remote desktop features after their security patch. https://www.linkedin.com/posts/cantinasecurity_microsoft-had-to-release-another-update-to-activity-7506359250521350144-1kjq
20. A14 Prophet Security — Prophet Security: When Prophet AI SOC Analyst investigated every alert in customer environments last fiscal quarter, there were a few aggregate findings our security operations team felt were worth bubbling up. https://www.linkedin.com/posts/prophetsecurity_q3-2026-quarterly-threat-report-findings-activity-7506047832131530752-RwtH
21. A16 Nebulock — Nebulock: Most threat hunting assumes an adversary on the other end. https://www.linkedin.com/posts/nebulock-inc_most-threat-hunting-assumes-an-adversary-activity-7506026760321384448-DMAL
22. A26 SOCNova — SOCNova: Türkiye'deki Kurumları Hedefleyen Web Sunucu Odaklı Sızma Faaliyetine yönelik İstihbarat ekibimizin raporu https://tr.linkedin.com/posts/socnova-ai_socnova-tehditistihbaratiraporu-sn-ti-2026-activity-7505586298414628864-G9hQ
23. A4 HarkX — HarkX: A leading financial services firm received a phishing message through Microsoft Teams from an unknown external user. https://www.linkedin.com/posts/harkx_inside-a-harkx-investigation-activity-7506639852269051905-JVqw
24. A11 Anvilogic — Anvilogic: SAP kept Splunk. https://www.linkedin.com/posts/anvilogic_agenticsecops-siem-securityoperations-activity-7506351357256220672-NaOs
25. A30 Cantina — Cantina: We'll take the number 1 spot on HackerOne's US leaderboard with our autonomous pentester. https://www.linkedin.com/posts/cantinasecurity_well-take-the-number-1-spot-on-hackerones-activity-7505279863705178113-jifQ
26. A18 Rilian — Rilian: Day one at GISEC GLOBAL is in the books. https://www.linkedin.com/posts/riliantech_day-one-at-gisec-global-is-in-the-books-activity-7506012523230330880-jsod
27. A28 RedCarbon — RedCarbon: UK: open https://www.linkedin.com/posts/redcarbon_redcarbon-aisoc-cybersecurity-activity-7505528862181621760-M41C
28. A1 Kai Security — Kai: Attackers operate at machine speed, while the teams defending against them are still evaluating tools built for human speed. https://www.linkedin.com/posts/kai-security_attackers-operate-at-machine-speed-while-activity-7506834525709172737-pXRO
29. A2 Kai Security — Kai: Women are 22% of the cybersecurity workforce and hold 16% of CISO seats. https://www.linkedin.com/posts/kai-security_women-are-22-of-the-cybersecurity-workforce-activity-7506702244881358850-mM8N
30. A31 VigilBase — Vigilbase: Daniel Kabucho has joined Vigilbase as Head of Sales for Africa. https://www.linkedin.com/posts/vigilbase_daniel-kabucho-has-joined-vigilbase-as-head-activity-7505278148725538816-3SYT
31. A32 Mars Security — Mars Security: Aaron Mog has spent his career building detection programs. https://www.linkedin.com/posts/marssec_aaron-mog-has-spent-his-career-building-detection-activity-7505264312232554497-3S6Y
32. A5 Wirespeed — Wirespeed ⚡️: Coalition, Inc. https://www.linkedin.com/posts/wirespeedsecurity_coalition-inc-acquired-us-for-our-ability-activity-7506472611816689667-fiYu
33. C14 Zscaler Unveils New AI-Driven Threat Protection 'Agentic SOC' #AI #Cybersecurity #Zscaler https://bsky.app/profile/new3rd.bsky.social/post/3mvjob32wbn2w
34. C22 Zscaler Announces 'Zscaler Agentic SOC' to Contain AI-Driven Threats | Infoseek News https://bsky.app/profile/yayafa.bsky.social/post/3mvkokm4mkj2g
35. C23 Zscaler Agentic SOC: The Innovation in AI-Driven Security Operations – VOIX https://www.yayafa.com/2887887/ Zscaler's AI-Driven Threat Prevention... https://bsky.app/profile/yayafa.bsky.social/post/3mvldsgp25u2g
36. C24 Zscaler Announces 'Agentic SOC' – Detecting and Responding to Threats at Machine Speed – ZDNET Japan https://www.yayafa.com/2889287/ U.S. Zscaler announced on U.S. time, September 9... https://bsky.app/profile/yayafa.bsky.social/post/3mvpw7hfuk42y
37. C29 Zscaler Launches Agentic SOC, Betting on Telemetry Over Model Horsepower https://futurumgroup.com/insights/zscaler-launches-agentic-soc-betting-on-telemetry-over-model-horsepower/?utm_source=rss&utm_medium=rss&utm_campaign=zscaler-launches-agentic-soc-betting-on-telemetry-over-model-horsepower
38. C4 @arc-codex.com: Arctic Wolf Launches Aurora MDR Connect, Helping MSPs Bring the Benefits of the Enterprise-Grade Aurora Agentic SOC to More Customers, Faster https://bsky.app/profile/arc-codex.com/post/3mvntv2x4t52u
39. C18 @sipirtu.com: Splunk is expanding its Agentic SOC Workforce to combat AI-led attacks and enable autonomous defence at machine speed https://bsky.app/profile/sipirtu.com/post/3mvoimllozv2i
40. C79 Splunk is expanding its Agentic SOC Workforce with a set of new purpose-built skills, across detection, investigation, response, & governance, while expanding the value across our core portfolio to strengthen and democratize the agentic SOC for every org: https://t.co/L4KHltvIzx https://t.co/ZRtO3jV https://x.com/abhilashm2005/status/2100382051413152185
41. C34 CSCO, NVDA Stock Inch Higher — Cisco And Nvidia Expand Partnership To Bring Agentic AI To Splunk Customers https://newsable.asianetnews.com/markets/csco-nvda-stock-inch-higher-cisco-and-nvidia-expand-partnership-to-bring-agentic-ai-to-splunk-customers-articleshow-0anbhb2
42. C26 ServiceNow's answer to AI-speed attacks will sound familiar - consolidate the mess https://diginomica.com/servicenows-answer-ai-speed-attacks-will-sound-familiar-consolidate-mess
43. C49 The SOAR Is Dead. Long Live the AI SOC: A Buyer’s Guide https://securaa.io/the-soar-is-dead-long-live-the-ai-soc-a-buyers-guide/
44. C53 Why MSSPs Are Moving Away from Licensed SIEM https://techbullion.com/why-mssps-are-moving-away-from-licensed-siem/
45. C56 CrowdStrike Validated the Agentic SOC. Bricklayer Provides the Harness. https://www.bricklayer.ai/insights/crowdstrike-validated-agentic-soc-bricklayer-harness/
46. C50 Eventus Security urges decision-centric SOCs at AI summit https://securitybrief.in/story/eventus-security-urges-decision-centric-socs-at-ai-summit
47. C51 Google warns AI is reshaping cyber attacks & defences https://securitybrief.in/story/google-warns-ai-is-reshaping-cyber-attacks-defences
48. C57 Google says Gemini AI hacked three companies during cybersecurity test, here is how https://www.digit.in/news/general/google-says-gemini-ai-hacked-three-companies-during-cybersecurity-test-here-is-how.html
49. C54 Why AI Is Forcing Companies to Rethink the Way They Defend Their Networks https://www.analyticsinsight.net/artificial-intelligence/why-ai-is-forcing-companies-to-rethink-the-way-they-defend-their-networks

Earlier briefings

• AI in the SOC — Week of 2026-09-07
• SOC Automation — Week of 2026-08-17