AI SOC vendors list 2026
Independent, practitioner-run directory of 184 AI SOC, security automation, detection engineering and adjacent SecOps vendors. Maintained by SecOps Unpacked. Every vendor name links to its full profile.
Every vendor is listed for its SecOps and AI SOC offering. Capabilities, deployment and Shift Map placement describe that offering, not the vendor's full portfolio.
Last updated 2026-10-06.
How to use this list
This directory records what each vendor does. It does not rank them, and it names no single best platform, because the right one depends on which part of your lifecycle is weak, what telemetry you already have and how much you want the AI deciding on its own. Shortlist here on capability and deployment model, then score the shortlist against your own gap with the AI SecOps Evaluation Framework.
Frequently asked questions
What is an AI SOC?
An AI SOC uses AI agents and large language models to perform work that previously required human analysts: alert triage, investigation, response coordination, and case management. The term covers both AI-native platforms and traditional SIEM, automation, MDR, or detection engineering tools that have added AI on top. Both show up in this list. What differs is the architecture and how much of the workflow they finish on their own.
What is an AI SOC vendor?
A company that sells AI SOC software. Some vendors were built for this from the start. Others are established SIEM, automation, or MDR products that added it later. Both are in this list. The distinction that matters when you buy is not who was first. It is how much of the work the software finishes on its own, and which part of your lifecycle it covers. A tool that drafts an investigation summary and a tool that closes the case are sold with the same words.
What is the difference between an AI SOC vendor, platform, and provider?
In practice these three words are used for the same thing. Vendors pick whichever sounds best. A platform usually means software you run. A provider usually means people running it for you, closer to MDR. A vendor is whoever sells it. Read the deployment model rather than the noun. This list records the deployment archetype for every entry: Build it Yourself, Plug and Play, or Plug and Play & Customizable. Each implies a very different amount of work on your side.
What is the difference between AI SOC and Agentic SOC?
In practice, none. Practitioners use both terms for the same category. This list treats them as one.
The reason both terms exist comes from vendor positioning, not architecture. “AI SOC” was the label when the category emerged, back when AI mostly meant LLM summaries and GenAI-assisted triage. “Agentic SOC” arrived once vendors wanted to signal they had gone further: autonomous agents that reason and act, not just models that summarize. Every AI SOC vendor is now migrating their marketing toward “agentic” because it sounds more current.
What actually matters when you evaluate is not which label the vendor uses. It is how much of the workflow the software finishes on its own. A vendor calling itself “Agentic SOC” may still ask you to write playbooks. A vendor calling itself “AI SOC” may already run autonomously. Read the deployment archetype and the individual profiles, not the marketing.
Is an AI SOC the same as security automation with AI?
No. An automation platform executes predefined workflows faster. An AI SOC reasons over novel signals and drives decisions without predefined logic. You can use an automation platform to build AI SOC capabilities, but a pure-play AI SOC vendor is not an automation platform by default. Most tools currently marketed as AI SOC that require you to write playbooks are closer to workflow automation with an AI layer on top.
Why call this “AI for SecOps” and not “AI SOC”?
AI SOC is a specific category focused on alert triage, investigation, and response. This directory covers the wider SecOps workflow: detection engineering platforms, UBA tools, threat intelligence, MDR providers, automation, CIRM, and DFIR. AI for SecOps reflects the broader scope. AI SOC and Agentic SOC are major subsets, not the whole picture.
How are vendors categorized in this directory?
Every vendor is tagged across three editorial dimensions: capability (what the platform does: AI SOC, SIEM, Automation, MDR, detection engineering, and others), deployment archetype (Plug and Play, Plug and Play & Customizable, Build it Yourself), and Shift Map position (where in the SOC workflow it operates). See full category definitions →
How do I shortlist AI SOC vendors?
Start from the part of your lifecycle that is weak, not from a feature list. Filter the directory to that capability, then to a deployment archetype your team can operate. That leaves five to ten names. Score those against your own gap, not by comparing feature grids.
Two filters do most of the work. Capability tells you whether a vendor works on the problem you have. Deployment archetype tells you whether you can operate it. A product that is excellent at detection engineering is the wrong buy for a team whose alerts never get triaged.
How do I find the best AI SOC platforms in 2026?
There is no single best AI SOC platform in 2026 for every team. Compare AI SOC companies and Agentic SOC vendors against the work you need done, your existing telemetry, and the autonomy you can accept. Use this directory to shortlist platforms by primary category, capabilities and deployment. Validate the shortlist against your own requirements, not a universal vendor ranking.
How do I evaluate AI SOC vendors?
Start with ASEF, the AI SecOps Evaluation Framework: define your needs, compare relevant capabilities and delivery models, check the evidence, then validate your shortlist in a scored PoC. Use the directory to find candidates and read their available profile information. A directory listing is not an independent product review or a completed evaluation. How to evaluate AI SOC vendors: read the ASEF guide →
Is this AI SOC vendor list free?
Yes. The directory is free for everyone reading it. Vendors can optionally claim and maintain their own profile data.
Who runs this directory and why should I trust it?
SecOps Unpacked is built by working security practitioners. Every other “top AI SOC vendors” list on the web is published by a vendor, by a vendor’s content marketing agency, or by an SEO site recycling vendor marketing. Each of those lists ranks the publishing vendor at or near the top.
This list is different. The editorial layer, categories, deployment archetypes, Shift Map positioning, and practitioner notes are set independently.
About this list
No directory is perfect. This one is honest about what it is.
Vendors are included based on relevance to the AI SOC (also called Agentic SOC) space. Premium profiles are claimed by the vendor and updated through a self-service flow. The rest are based on public information. Either way, the editorial layer, categories, archetypes, Shift Map positioning, practitioner notes, is ours, and not for sale.
Machine readable: full text of every profile · site guide
| Vendor | Leads with | Capabilities | Deployment | Headquarters | Founded |
|---|---|---|---|---|---|
| 7AI | AI SOC Pure Play | MDR, SIEM, AI Agent Builder, Automation | Plug and Play | United States | 2024 |
| Above Security | Insider Risk | Data Analytics / UABA | Plug and Play | Wilmington, United States | 2025 |
| Abstract | SIEM | AI SOC Capability, Data Analytics / UABA, Detection Engineering, Data Pipeline | Plug and Play | Palo Alto, United States | 2023 |
| AirMdr | MDR | AI SOC Pure Play | Plug and Play | United States | 2023 |
| Airrived | Automation | AI Agent Builder, AI SOC Pure Play | Build it Yourself | United States | 2024 |
| AiStrike | AI SOC Pure Play | Detection Engineering, Automation, Threat Intel, MDR, Insider Risk | Plug and Play & Customizable | United States | 2024 |
| Alaris Security | AI Agent Builder | Threat Hunting, Detection Engineering, SecOps Resilience, Threat Intel, AI SOC Pure Play, Automation, CIRM / Case Management | Plug and Play & Customizable | San Francisco, United States | 2025 |
| Alpha Level | Data Analytics / UABA | Threat Hunting | Plug and Play | Seattle, United States | 2023 |
| Andesite | AI Agent Builder | AI SOC Pure Play, Threat Intel, Threat Hunting, Data Analytics / UABA | Plug and Play & Customizable | McLean, United States | 2023 |
| Anomali | AI SOC Capability | Data Analytics / UABA, SIEM, Threat Intel, Threat Hunting | Plug and Play | United States | 2013 |
| Anvilogic | SIEM | Detection Engineering, AI SOC Capability | Plug and Play | Palo Alto, United States | 2019 |
| AquilaI | AI SOC Pure Play | Data Analytics / UABA, CTEM, SIEM | Plug and Play | India | 2020 |
| Arambh Labs | AI SOC Pure Play | Detection Engineering, Threat Hunting, Automation, AI Agent Builder, Threat Intel | Plug and Play & Customizable | San Carlos, United States | 2024 |
| Arcanna AI | AI SOC Pure Play | Plug and Play & Customizable | United States | 2019 | |
| Arctic Wolf | MDR | SIEM, Data Analytics / UABA, AI SOC Capability | Plug and Play | United States | 2012 |
| Artemis | SIEM | AI SOC Pure Play, Data Analytics / UABA, Threat Hunting, Threat Intel, DFIR / Forensics, SecOps Resilience, MDR, Detection Engineering, Data Pipeline, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 2025 |
| Asymmetric Security | DFIR / Forensics | AI SOC Capability, MDR, Insider Risk | London, United Kingdom | 2025 | |
| AttackIQ | Attack Simulation | Detection Engineering | Los Altos, United States | 2013 | |
| Auguria | Data Pipeline | Data Analytics / UABA | Plug and Play | Ladera Ranch, United States | 2022 |
| Axoflow | Data Pipeline | Data Analytics / UABA, Detection Engineering | Plug and Play & Customizable | Stamford, United States | 2023 |
| Axonius | CTEM | AI SOC Supporting Capability, CIRM / Case Management | Plug and Play & Customizable | New York, United States | 2017 |
| Beacon Security | Data Pipeline | Automation, Data Analytics / UABA, SIEM, Threat Hunting, AI Agent Builder, Detection Engineering, AI SOC Capability | Plug and Play & Customizable | United States | 2024 |
| Binalyze | DFIR / Forensics | Automation, Threat Hunting, CIRM / Case Management, AI SOC Capability, AI Agent Builder | Plug and Play & Customizable | Tallinn, Estonia | 2018 |
| Binary Defense | MDR | Threat Hunting, AI SOC Capability, Data Pipeline, DFIR / Forensics, Automation, CIRM / Case Management | Plug and Play | Cleveland, United States | 2012 |
| BlinkOps | AI Agent Builder | Threat Hunting, Threat Intel, AI SOC Capability, Automation, CIRM / Case Management | Plug and Play & Customizable | Austin, United States | 2021 |
| Brava | Detection Engineering | SecOps Resilience, Attack Simulation | Tel Aviv, Israel | 2024 | |
| Bricklayer AI | AI SOC Pure Play | Threat Hunting, Threat Intel, AI Agent Builder, Automation | Plug and Play & Customizable | Arlington, United States | 2023 |
| Cantina | Automation | AI Agent Builder, AI SOC Pure Play | Plug and Play & Customizable | United States | 2021 |
| Caver | SIEM | AI SOC Capability, Data Pipeline, Data Analytics / UABA, Threat Intel, Threat Hunting, DFIR / Forensics, Detection Engineering, Insider Risk, MDR, AI Agent Builder, Automation, CIRM / Case Management | Plug and Play & Customizable | Nashville , United States | 2026 |
| CipherData | AI SOC Pure Play | Detection Engineering, Data Pipeline, Data Analytics / UABA, Threat Hunting, SIEM, Automation, CIRM / Case Management | Plug and Play | Bellevue, United States | 2023 |
| Cognna | MDR | AI SOC Pure Play | Plug and Play | Saudi Arabia | 2022 |
| Command Zero | AI SOC Pure Play | Threat Hunting, CIRM / Case Management, Automation, Insider Risk | Plug and Play & Customizable | Austin, United States | 2022 |
| Conifers | CIRM / Case Management | Detection Engineering, SecOps Resilience, Threat Hunting, Threat Intel, AI SOC Pure Play | Plug and Play | United States | 2024 |
| Corma | AI SOC Pure Play | Security Context Graph | Tel Aviv, Israel | 2025 | |
| Cotool | AI Agent Builder | AI SOC Pure Play | Build it Yourself | United States | 2025 |
| CounterShadow | AI SOC Pure Play | Plug and Play | London, United Kingdom | 2024 | |
| Cribl | Data Pipeline | Data Analytics / UABA, Detection Engineering, SIEM, AI SOC Capability | Build it Yourself | San Francisco, United States | 2018 |
| CriticalStart | MDR | AI SOC Capability | Plug and Play | United States | 2012 |
| Crogl | AI SOC Pure Play | Plug and Play | United States | 2023 | |
| CrowdStrike | SIEM | Data Analytics / UABA, Threat Hunting, MDR, DFIR / Forensics, Threat Intel, AI SOC Capability, AI Agent Builder, CTEM, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 2011 |
| Culminate | AI SOC Pure Play | Plug and Play | United States | 2023 | |
| Cyber Defence | Data Analytics / UABA | DFIR / Forensics, SIEM, Threat Hunting, AI SOC Capability, Automation | Plug and Play & Customizable | United Kingdom | 2009 |
| CyberProof | AI SOC Capability | Data Analytics / UABA | Plug and Play | United States | 2017 |
| Cydarm | CIRM / Case Management | AI SOC Capability | Build it Yourself | Australia | 2017 |
| Cylerian | SIEM | AI SOC Capability, MDR, Data Pipeline, Detection Engineering, DFIR / Forensics, Insider Risk, Threat Hunting, ITDR, AI Agent Builder, Data Analytics / UABA, Threat Intel, Automation, CIRM / Case Management | Build it Yourself | United States | 2018 |
| Cymph | SecOps Resilience | Plug and Play & Customizable | Tallinn, Estonia | 2023 | |
| Cymulate | Attack Simulation | Detection Engineering, CTEM | Plug and Play | New York, United States | |
| Cyware | CIRM / Case Management | Threat Intel, AI SOC Capability | Build it Yourself | United States | 2016 |
| D3 Security | AI SOC Capability | Threat Hunting, Automation, CIRM / Case Management | Build it Yourself | Vancouver, Canada | 2012 |
| DarkTrace | NDR | AI SOC Capability, Data Analytics / UABA, DFIR / Forensics | Plug and Play | United Kingdom | 2013 |
| Databahn | Data Pipeline | AI SOC Capability, Data Analytics / UABA, Detection Engineering, Threat Hunting | Dallas, United States | 2023 | |
| DataBee | Data Pipeline | Data Analytics / UABA | Plug and Play & Customizable | Philadelphia, United States | |
| Databricks | SIEM | Automation, AI Agent Builder | Plug and Play & Customizable | United States | 2013 |
| Datadog | SIEM | Detection Engineering, Data Analytics / UABA, AI Agent Builder, AI SOC Capability, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 2010 |
| Daylight Security | AI SOC Pure Play | MDR, Threat Hunting | Plug and Play | United States | 2024 |
| DeepTempo | Data Analytics / UABA | AI SOC Pure Play, Threat Hunting | Plug and Play | United States | 2023 |
| DeepWatch | MDR | AI SOC Capability | Plug and Play | United States | 2015 |
| Detections AI | Detection Engineering | SecOps Resilience, AI SOC Capability, Threat Hunting, Threat Intel | Plug and Play & Customizable | United States | 2023 |
| Digital Hands | MDR | AI SOC Capability, Threat Hunting, ITDR, Data Pipeline, Data Analytics / UABA, Detection Engineering, SIEM, Threat Intel, Automation, CIRM / Case Management | Plug and Play & Customizable | Tampa, United States | 2001 |
| dndx AI | Automation | AI SOC Pure Play, MDR | Plug and Play & Customizable | İstanbul, Turkey | 2022 |
| Dropzone AI | AI SOC Pure Play | Threat Hunting, Threat Intel | Plug and Play | Seattle, United States | 2023 |
| Elastic | SIEM | Detection Engineering, Data Analytics / UABA, AI Agent Builder, AI SOC Capability, Data Pipeline, Threat Hunting, Threat Intel, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 2012 |
| Elezar | Threat Intel | Threat Hunting, AI SOC Pure Play, Automation, Detection Engineering, Security Context Graph | Plug and Play | Melbourne, Australia | 2024 |
| Embed Security | AI SOC Pure Play | Detection Engineering | Plug and Play | United States | 2024 |
| eSentire Inc. | MDR | CTEM, Threat Intel, DFIR / Forensics, Data Analytics / UABA, CIRM / Case Management, AI SOC Capability, Automation, Attack Simulation, SIEM | Plug and Play & Customizable | Waterloo, Canada | 2001 |
| Exabeam | SIEM | Data Analytics / UABA, AI SOC Capability, Automation, CIRM / Case Management | Build it Yourself | United States | 2013 |
| Exaforce | AI SOC Pure Play | SIEM, Data Analytics / UABA, Detection Engineering, Threat Hunting, Threat Intel, MDR, Data Pipeline, Automation, CIRM / Case Management | Plug and Play | San Jose, United States | 2023 |
| Expel | MDR | AI SOC Capability, Threat Hunting, CIRM / Case Management, Detection Engineering | Plug and Play | Herndon, United States | 2016 |
| EXTRAHOP | NDR | Threat Hunting, Data Pipeline, Data Analytics / UABA, AI SOC Capability | Plug and Play & Customizable | seattle, United States | 2007 |
| Fig | SecOps Resilience | Detection Engineering | Plug and Play | New York, United States | 2025 |
| Fortinet | AI SOC Capability | SIEM, MDR, Data Analytics / UABA, Data Pipeline, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 2000 |
| Ghost Security | AI Agent Builder | AI SOC Capability | Plug and Play & Customizable | United States | 2022 |
| Google SecOps | SIEM | Data Analytics / UABA, Threat Intel, AI SOC Capability, Data Pipeline, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 1998 |
| GuarDDoG AI | Data Analytics / UABA | AI SOC Pure Play, NDR | Plug and Play | United States | 2019 |
| Gurucul | SIEM | Data Analytics / UABA, AI SOC Capability, Automation, CIRM / Case Management | Plug and Play | United States | 2010 |
| HarkX | AI SOC Pure Play | CIRM / Case Management, Data Analytics / UABA, Data Pipeline, Detection Engineering, Threat Hunting | Plug and Play | India | 2026 |
| Hawkeye AI | AI SOC Capability | Data Analytics / UABA, Threat Hunting, Threat Intel, Detection Engineering, Data Pipeline, Automation, CIRM / Case Management | Plug and Play & Customizable | United Arab Emirates | 2011 |
| Huntbase | Threat Hunting | AI SOC Pure Play | London, United Kingdom | 2024 | |
| Hunters | AI SOC Capability | SIEM, Data Analytics / UABA | Plug and Play | Israel | 2018 |
| HydraNexus | Threat Intel | AI SOC Capability | Plug and Play | Naperville, United States | 2016 |
| Imperum | AI Agent Builder | DFIR / Forensics, AI SOC Pure Play, Detection Engineering, Data Analytics / UABA, Threat Hunting, Threat Intel, SecOps Resilience, Automation, CIRM / Case Management | Plug and Play & Customizable | Amsterdam, Netherlands | 2022 |
| Intezer | AI SOC Capability | Threat Hunting, DFIR / Forensics, Threat Intel, AI Agent Builder, Automation, CIRM / Case Management | Plug and Play & Customizable | New York, United States | 2015 |
| Jazz | Insider Risk | AI SOC Capability | Plug and Play | New York, United States | 2024 |
| Joon | AI Agent Builder | AI SOC Pure Play | Plug and Play | United States | 2025 |
| Jutsu | AI SOC Pure Play | Automation, CIRM / Case Management, Attack Simulation | Plug and Play | Concord, United States | 2023 |
| Kai Security | Automation | AI Agent Builder, AI SOC Pure Play, CTEM | Plug and Play | United States | 2025 |
| Kenzo Security | AI SOC Pure Play | Plug and Play | United States | 2022 | |
| Kindo | Automation | AI Agent Builder | Build it Yourself | United States | 2022 |
| Kyberis | Threat Intel | Plug and Play & Customizable | San Francisco, United States | 2026 | |
| Legion Security | AI SOC Pure Play | Insider Risk, Threat Hunting, Threat Intel, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 2024 |
| LimaCharlie | SIEM | AI Agent Builder, AI SOC Capability, DFIR / Forensics, Threat Hunting, Detection Engineering, Data Pipeline, Automation, CIRM / Case Management | Build it Yourself | Covina, United States | 2018 |
| Louie AI | Data Analytics / UABA | OSS, AI Agent Builder, AI SOC Pure Play | Build it Yourself | United States | 2014 |
| Mallory | Threat Intel | CTEM, Threat Hunting | Plug and Play | Austin, United States | 2024 |
| Mars Security | Detection Engineering | AI SOC Pure Play, Threat Hunting | Plug and Play & Customizable | Tel Aviv, Israel | 2025 |
| Mate Security | AI SOC Pure Play | Automation, AI Agent Builder, Threat Hunting | Plug and Play | Israel | 2025 |
| Mave | AI SOC Pure Play | Plug and Play | Israel | 2025 | |
| Method Security | AI SOC Pure Play | Plug and Play | United States | 2023 | |
| Microsoft Sentinel | AI SOC Capability | Data Analytics / UABA, SIEM, Data Pipeline, Automation, CIRM / Case Management | Build it Yourself | United States | 1975 |
| Mindflow | Automation | AI Agent Builder, AI SOC Capability, Threat Intel | Plug and Play & Customizable | France | 2021 |
| Mitiga | AI SOC Capability | Data Analytics / UABA | Plug and Play | New York, United States | 2020 |
| Mitigant | Attack Simulation | Detection Engineering, SecOps Resilience | Plug and Play & Customizable | Potsdam, Germany | 2021 |
| Monad | Data Pipeline | Detection Engineering, SecOps Resilience | Plug and Play & Customizable | San Francisco, United States | 2020 |
| MYRMEX | Automation | AI SOC Supporting Capability, CTEM, Threat Intel | Plug and Play & Customizable | São Paulo, Brazil | 2023 |
| Nebulock | Threat Hunting | AI SOC Capability, Detection Engineering | Plug and Play & Customizable | Boston, United States | 2024 |
| NextSOC | AI SOC Pure Play | Data Pipeline, Detection Engineering, Automation, CIRM / Case Management | Plug and Play & Customizable | New York, United States | 2026 |
| Ontinue | MDR | AI SOC Capability | Plug and Play | Zurich, Switzerland | |
| Orryx AI | AI SOC Pure Play | Automation, Threat Hunting, Threat Intel, CIRM / Case Management, MDR, Detection Engineering | Plug and Play | Hamala, Bahrain | 2022 |
| PaloAlto | SIEM | AI Agent Builder, AI SOC Capability, Data Analytics / UABA, Threat Intel, MDR, Data Pipeline, ITDR, CTEM, Automation, CIRM / Case Management | Build it Yourself | United States | 2005 |
| Panther | SIEM | Detection Engineering, Data Analytics / UABA, AI SOC Capability, Threat Intel, Threat Hunting, Data Pipeline | Plug and Play & Customizable | United States | 2018 |
| Perpetual Systems | SIEM | AI SOC Capability, CIRM / Case Management, Data Pipeline, Detection Engineering, Threat Hunting, Data Analytics / UABA | Plug and Play & Customizable | Austin, United States | 2024 |
| Port0 | AI SOC Pure Play | Plug and Play & Customizable | Tel Aviv, Israel | 2024 | |
| PRE Security | Automation | AI SOC Pure Play | Plug and Play | United States | 2023 |
| Priam Cyber AI | AI SOC Pure Play | Plug and Play & Customizable | London, United Kingdom | 2023 | |
| Prophet Security | Detection Engineering | Threat Hunting, AI SOC Pure Play, Threat Intel | Plug and Play | United States | 2023 |
| Qevlar | AI SOC Pure Play | Plug and Play | Paris, France | 2023 | |
| Query | Data Analytics / UABA | Data Pipeline, SIEM | Plug and Play & Customizable | Atlanta, United States | 2018 |
| RAD Security | AI SOC Capability | Data Pipeline, Automation, Threat Hunting | Plug and Play | San Francisco, United States | |
| Radiant Security | AI SOC Pure Play | Plug and Play | United States | 2021 | |
| Realm Security | Data Pipeline | Detection Engineering | Plug and Play | Boston, United States | 2024 |
| ReliaQuest | SIEM | Detection Engineering, Data Analytics / UABA, MDR, AI SOC Capability, Automation, CIRM / Case Management | Plug and Play | United States | 2007 |
| Rilian | AI SOC Pure Play | Plug and Play | United States | 2024 | |
| RunReveal | SIEM | Detection Engineering, Data Analytics / UABA, AI Agent Builder, Data Pipeline, Threat Hunting, SecOps Resilience, AI SOC Capability | Plug and Play | United States | |
| SafeBreach | Attack Simulation | Sunnyvale, United States | 2014 | ||
| Scanner | SIEM | Data Pipeline, AI SOC Capability, Detection Engineering, Data Analytics / UABA | Build it Yourself | United States | |
| Scythe | Attack Simulation | Detection Engineering, SecOps Resilience | Plug and Play | Arlington, United States | 2017 |
| SecGenie AI | AI SOC Pure Play | CTEM | Bengaluru, India | 2025 | |
| SecsphereSOC | AI SOC Pure Play | SIEM, Automation, CIRM / Case Management | Plug and Play & Customizable | India | 2021 |
| Seculyze | AI SOC Capability | Data Analytics / UABA | Plug and Play | Copenhagen, Denmark | 2021 |
| Securaa | AI SOC Capability | Threat Intel, Automation, CIRM / Case Management | Plug and Play & Customizable | Mysuru, India | 2017 |
| Secure.com | AI SOC Pure Play | Plug and Play & Customizable | Wilmington, United States | 2024 | |
| SecureVisio | SIEM | AI SOC Capability, Data Analytics / UABA, Detection Engineering, Data Pipeline, Threat Hunting, Threat Intel, Automation, CIRM / Case Management | Build it Yourself | Warsaw, Poland | 2010 |
| Sekoia | SIEM | Data Analytics / UABA, Threat Intel, AI SOC Capability, Detection Engineering, Data Pipeline, Threat Hunting, Automation, CIRM / Case Management | Plug and Play | Rennes, France | 2022 |
| SentinelOne | SIEM | Data Analytics / UABA, Automation, Threat Hunting, MDR, DFIR / Forensics, Threat Intel, AI SOC Capability | Plug and Play | United States | 2013 |
| ServiceNow | Automation | AI SOC Capability, Threat Intel, ITDR, CTEM, CIRM / Case Management | Build it Yourself | Santa Clara, United States | 2004 |
| Sevii | AI SOC Pure Play | Plug and Play | United States | 2024 | |
| Sharelock | ITDR | Plug and Play | Italy | 2017 | |
| Shuffle | Automation | AI SOC Capability, OSS, CIRM / Case Management | Build it Yourself | Oslo, Norway | 2019 |
| Simbian | AI SOC Pure Play | Threat Hunting, Detection Engineering, Security Context Graph | Plug and Play & Customizable | Mountain View, United States | 2023 |
| SIRP | CIRM / Case Management | AI SOC Capability, OSS | Plug and Play & Customizable | United States | 2017 |
| Sleuth Kit Labs | OSS | DFIR / Forensics, AI SOC Capability, Automation, CIRM / Case Management | Build it Yourself | United States | 2023 |
| SOC Prime | Detection Engineering | SIEM, Data Analytics / UABA, AI SOC Pure Play | Plug and Play & Customizable | United States | 2015 |
| SOCAI | AI SOC Pure Play | Plug and Play | Spain | 2019 | |
| Socjedi AI | AI SOC Pure Play | Plug and Play | United States | 2024 | |
| SOCNova | AI SOC Pure Play | CIRM / Case Management | Plug and Play | Turkey | 2026 |
| Sola | Security Context Graph | AI Agent Builder, AI SOC Capability, Data Analytics / UABA | Plug and Play & Customizable | United States | 2024 |
| Sophos | Data Pipeline | Detection Engineering, DFIR / Forensics, ITDR, MDR, SIEM, Threat Hunting, Threat Intel, AI SOC Capability, Automation, CIRM / Case Management | Oxford, United Kingdom | 1985 | |
| Spacewalk AI | AI SOC Pure Play | CIRM / Case Management, DFIR / Forensics, Insider Risk, Threat Hunting | Plug and Play & Customizable | Irvine, United States | 2024 |
| Spectrum Security | Detection Engineering | SecOps Resilience | Plug and Play | San Francisco, United States | 2025 |
| Spharaka | Data Analytics / UABA | SIEM, AI SOC Pure Play, Threat Hunting, Threat Intel, ITDR, Automation, CIRM / Case Management | Plug and Play & Customizable | Hyderabad, India | 2025 |
| Splunk | SIEM | Detection Engineering, Data Analytics / UABA, AI SOC Capability, AI Agent Builder, Automation, CIRM / Case Management | Plug and Play | United States | 2003 |
| Stellar Cyber | SIEM | Data Analytics / UABA, CIRM / Case Management, AI SOC Capability | Plug and Play | United States | 2015 |
| StrangeBee | CIRM / Case Management | Automation | Paris, France | 2018 | |
| Strike48 | AI SOC Pure Play | AI Agent Builder, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 2026 |
| StrikeReady | SIEM | Data Pipeline, DFIR / Forensics, Detection Engineering, SecOps Resilience, Threat Hunting, Threat Intel, AI SOC Capability, Automation, CIRM / Case Management | Plug and Play | United States | 2019 |
| Sumo Logic | SIEM | Detection Engineering, Data Analytics / UABA, AI SOC Capability, Automation, CIRM / Case Management | Plug and Play | United States | 2010 |
| Swimlane | AI Agent Builder | AI SOC Capability, Threat Hunting, Automation, CIRM / Case Management | Plug and Play & Customizable | United States | 2015 |
| TandemTrace | AI SOC Pure Play | Plug and Play | Spain | 2024 | |
| Tenacium DC | SecOps Resilience | Data Analytics / UABA, AI SOC Capability, ITDR, Data Pipeline, Automation, CIRM / Case Management | Plug and Play & Customizable | London, United Kingdom | 2021 |
| Tencyle | AI SOC Pure Play | Threat Hunting, Threat Intel, Automation, CIRM / Case Management | Plug and Play | Tel Aviv, Israel | 2022 |
| Tenex AI | MDR | AI SOC Pure Play | Plug and Play | United States | 2025 |
| Tenzir | Data Pipeline | Data Analytics / UABA | Plug and Play & Customizable | Hamburg, Germany | 2017 |
| ThreatDefence | MDR | AI SOC Capability, Data Pipeline, Threat Hunting, SIEM | Plug and Play | Australia | 2016 |
| ThreatLens | AI SOC Pure Play | Data Pipeline, Automation | Plug and Play | United Arab Emirates | 2025 |
| Tidal Cyber | Detection Engineering | Attack Simulation | Reston, United States | 2021 | |
| Tier4 AI | MDR | AI SOC Pure Play | Plug and Play | Miami, United States | 2024 |
| Tines | AI SOC Capability | AI Agent Builder, Automation, CIRM / Case Management | Build it Yourself | Ireland | 2018 |
| Torq | AI SOC Capability | Threat Hunting, AI Agent Builder, Automation, CIRM / Case Management | Plug and Play & Customizable | New York, United States | 2020 |
| Tracebit | Deception | Plug and Play & Customizable | London, United Kingdom | 2023 | |
| TraceCat | Automation | OSS, AI SOC Capability, AI Agent Builder, CIRM / Case Management | Build it Yourself | New York, United States | 2024 |
| Tracemill | Detection Engineering | Attack Simulation | San Francisco, United States | 2026 | |
| Treat | AI Agent Builder | Threat Intel, Data Analytics / UABA, AI SOC Capability, CIRM / Case Management | Plug and Play & Customizable | Tel-Aviv, Israel | 2024 |
| TrenchSecurity | SIEM | Data Pipeline, AI SOC Pure Play, Automation, CIRM / Case Management | Plug and Play | Lawrenceville, United States | 2025 |
| TrendAI | SIEM | AI SOC Capability, ITDR, DFIR / Forensics, Data Analytics / UABA, Data Pipeline, Threat Hunting, Threat Intel, Automation, CIRM / Case Management | Plug and Play & Customizable | Tokyo, Japan | 1988 |
| Tuskira | CTEM | Detection Engineering, Threat Hunting, AI SOC Pure Play | Plug and Play | United States | 2023 |
| UltraViolet Cyber | Attack Simulation | Detection Engineering, Threat Hunting, MDR, Automation | Plug and Play | McLean, United States | 2023 |
| UnderDefense | MDR | Detection Engineering, Threat Hunting, Threat Intel, ITDR, SIEM, AI SOC Capability, Automation, CIRM / Case Management | Plug and Play & Customizable | New York, United States | 2017 |
| Vega | SIEM | Detection Engineering, Data Analytics / UABA, SecOps Resilience, AI SOC Capability | Plug and Play | Israel | 2024 |
| Vigil | OSS | AI SOC Pure Play, AI Agent Builder | Plug and Play | United States | 2026 |
| Voidum AB | SIEM | Threat Hunting, Threat Intel, ITDR, Detection Engineering, Data Analytics / UABA, AI Agent Builder, AI SOC Capability, Data Pipeline, NDR, Automation, CIRM / Case Management | Plug and Play & Customizable | Stockholm, Sweden | 2026 |
| Wirespeed | MDR | SIEM, AI SOC Pure Play, ITDR, Automation, Threat Intel | Plug and Play & Customizable | San Francisco, United States | 2024 |
| Wraithwatch | AI SOC Pure Play | Data Analytics / UABA | Plug and Play | United States | 2023 |
| Zaun | Data Analytics / UABA | Insider Risk | Plug and Play | San Francisco, United States | 2024 |
| Zscaler | NDR | AI SOC Capability, Data Analytics / UABA, Insider Risk, MDR, CTEM | Plug and Play & Customizable | United States | 2007 |
| Zynap | AI SOC Pure Play | Automation, Threat Intel | Plug and Play & Customizable | Barcelona, Spain | 2024 |