Attic IVON (Agentic MDR for Microsoft 365)

What it does

IVON is Attic Security's AI SOC agent inside its agentic MDR service for Microsoft 365. Attic says IVON triages, investigates and contains identity signals across Microsoft Defender, Sentinel and Entra ID. Each alert gets a verdict (true positive, false alarm, benign or undetermined) with confidence and evidence. IVON proposes remediation, which Attic executes after customer sign-off, or immediately for action types the customer has pre-approved. Cases are escalated to human analysts, and there is a full audit trail. Attic claims mitigation in about 6 minutes on average (vendor figure). The service targets SMBs and offers a 14-day free trial.

Frameworks (vendor-stated)

No framework tags yet.

Pricing (as published)

Published: the agentic MDR page lists €6 per user per month, decreasing with more users. The pricing page lists plans from €27/month on annual billing, with incident-handling add-ons (+2x IVON incident handling from €30.15, +5x from €34.20). Prices exclude VAT. Check the pricing page for current amounts.

India relevance

Relevant to CERT-In incident detection and response capability building; not a CERT-In compliance product by itself.

Tasks

security operationsalert triageincident responsethreat detectionremediation

Sources

1. atticsecurity.com/en/agentic-mdr/ (primary)
2. atticsecurity.com/en/ivon/
3. atticsecurity.com/en/blog/attic-launches-ivon/
4. atticsecurity.com/en/pricing/
5. atticsecurity.com/en/about/

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Use-case comparisons

• AI SOC and security-analyst agents — 51 verified listings (Security operations, alert investigation and threat detection)

Compare Attic IVON (Agentic MDR for Microsoft 365) with

• 
  7AI agentic security platform vs Attic IVON (Agentic MDR for Microsoft 365)
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) vs Attic IVON (Agentic MDR for Microsoft 365)
• 
  Adaptive Security Agentic Email Security and Phish Triage vs Attic IVON (Agentic MDR for Microsoft 365)
• 
  Aikido Attack AI Pentesting vs Attic IVON (Agentic MDR for Microsoft 365)
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Attic IVON (Agentic MDR for Microsoft 365)
• A
  Andesite Human-AI SOC (Azimuth for Government) vs Attic IVON (Agentic MDR for Microsoft 365)
• 
  Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents) vs Attic IVON (Agentic MDR for Microsoft 365)
• 
  AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation) vs Attic IVON (Agentic MDR for Microsoft 365)
• 
  Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) vs Attic IVON (Agentic MDR for Microsoft 365)
• 
  Ares Cyber agentic AI security testing platform (autonomous exploit chaining and runtime verification across SAST, SCA, DAST, VA and pentest) vs Attic IVON (Agentic MDR for Microsoft 365)

Alternatives

• 
  7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
• 
  Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
• 
  Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.
• A
  Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.

See all Attic IVON alternatives →

FAQ (from this dataset)

What does Attic IVON do?

Dutch AI SOC agent for Microsoft 365 SMBs that triages, investigates and contains identity alerts across Defender, Sentinel and Entra ID with human sign-off.

How much does Attic IVON cost?

Published: the agentic MDR page lists €6 per user per month, decreasing with more users. The pricing page lists plans from €27/month on annual billing, with incident-handling add-ons (+2x IVON incident handling from €30.15, +5x from €34.20). Prices exclude VAT. Check the pricing page for current amounts.

Where is Attic Security headquartered?

Netherlands

What are alternatives to Attic IVON?

See the Attic IVON alternatives page for category-sharing listings in relevance order, not a ranking. Attic IVON alternatives.

Stay updated