Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)

What it does

Ironscales sells AI email security that sits on top of Microsoft 365 and Google Workspace through an API, with no MX changes, and can run alongside or replace a secure email gateway. Its agents page describes three AI agents. The Phishing SOC Agent does the forensic investigation a skilled L2 analyst would do on a suspicious or reported email. It runs five parallel tracks: sender and domain authentication, body analysis for social engineering, URL-chain inspection, attachment scanning with 100+ engines and sandbox detonation, and relay tracing. It returns a Safe, Phishing or Spam verdict with evidence and a log of every step it took. The Red Teaming Agent runs recurring reconnaissance (social media, press releases, job posts, vendor news), generates the emails an attacker would write for your organisation, and feeds them into detection so the attack is already detected when it arrives. The Phishing Simulation Agent builds personalised simulations from OSINT, groups employees into 'Phishing Threat Clusters' for one-sample approval, and targets the highest-risk users. The pricing page lists 'Agentic AI Autonomous Remediation' (a virtual SOC that detects and remediates email threats hands-free) in its plans, plus customisable remediation thresholds. Figures such as a 97-second average L2 investigation and 99%+ automatic remediation are vendor claims. Ironscales was founded in Israel in 2014; its About page says it is headquartered in Atlanta, Georgia and Tel Aviv, and its privacy policy says it is a global company headquartered in the US. Pricing is quote-based.

Frameworks (vendor-stated)

No framework tags yet.

Pricing (as published)

Not published (plan cards on the pricing page say 'Get Pricing')

Tasks

phishing triageemail securityincident responseremediationthreat detection

Sources

1. ironscales.com/platform/agents (primary)
2. ironscales.com/
3. ironscales.com/pricing
4. ironscales.com/about
5. ironscales.com/contact-us
6. ironscales.com/privacy-policy/

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Use-case comparisons

• Email security and phishing-response AI agents — 16 verified listings (Triage of user-reported phishing, autonomous email threat remediation and AI-run phishing simulation)

Compare Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) with

• 
  7AI agentic security platform vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• 
  Adaptive Security Agentic Email Security and Phish Triage vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• 
  Aikido Attack AI Pentesting vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• A
  Andesite Human-AI SOC (Azimuth for Government) vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• 
  Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents) vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• 
  AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation) vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• 
  Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
• 
  Ares Cyber agentic AI security testing platform (autonomous exploit chaining and runtime verification across SAST, SCA, DAST, VA and pentest) vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)

Alternatives

• 
  7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
• 
  Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
• 
  Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.
• A
  Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.

See all Ironscales AI agents alternatives →

FAQ (from this dataset)

What does Ironscales AI agents do?

API-based email security for Microsoft 365 and Google Workspace that runs three AI agents: a Phishing SOC Agent for L2-style forensic investigation of suspicious emails, a Red Teaming Agent that models attacks aimed at your organisation and hardens detection, and a Phishing Simulation Agent. Plans include agentic autonomous remediation.

How much does Ironscales AI agents cost?

Not published (plan cards on the pricing page say 'Get Pricing')

Where is Ironscales headquartered?

United States

What are alternatives to Ironscales AI agents?

See the Ironscales AI agents alternatives page for category-sharing listings in relevance order, not a ranking. Ironscales AI agents alternatives.

Stay updated