Darktrace Cyber AI Analyst alternatives: AI SOC analyst agents compared
Quick answer
Darktrace Cyber AI Analyst alternatives (2026): 50 other AI SOC and security-analyst listings from the AI SOC use-case table in Agent Index dataset v0.1.27 (generated 2026-10-27).
The curated table is relevance order, a relevance grouping from dataset tags, not a ranking or quality judgement.
Darktrace Cyber AI Analyst is listed under Security. Facts come from vendor pages and official registries.
Darktrace Cyber AI Analyst is listed under Security. These 162 agents share at least one category with it, ordered by number of shared framework tags, then category (a relevance order, not a ranking).
Headquartered in the UK or Europe
HQ country as published on each vendor’s own pages. Shown first because Darktrace Cyber AI Analyst publishes a United Kingdom headquarters. Not a ranking.
- Qevlar AI — France
- Sophos MDR AI Agents (Triage and Case Investigation) — United Kingdom
- Sekoia Elevate (AI SOC agents) — France
- Imperum Virtus AI SOC agents (Triage, Pilot, Email Phishing) — Netherlands
- Attic IVON (Agentic MDR for Microsoft 365) — Netherlands
- Reliance Cyber RADAR — United Kingdom
- Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) — Switzerland
- Gambit Cyber Vizier AI and KnightGuard AI agents (agentic CTEM and security workflow automation) — Netherlands
- Decanos AI Agents (Triage, Investigate, Hunt, Response and Compliance agents for autonomous security operations) — Germany
- CloudPeek agentic security operations platform (automatic triage, agent-run investigations and approval-gated response) — United Kingdom
- Priam AVA (autonomous L1 alert triage and investigation agent with evidence-backed verdicts) — United Kingdom
- CounterShadow AMI (Autonomous Machine Intelligence) – autonomous SOC triage, investigation and response — United Kingdom
AI SOC analyst alternatives to Darktrace Cyber AI Analyst
Members of the AI SOC and security-analyst use-case table besides Darktrace Cyber AI Analyst, in relevance order (shared security-operations task tags), not a ranking. Facts come from vendor pages and official registries; confirm with each vendor. Relevance order, not a ranking.
Government authorizations (as stored)
FedRAMP, GovRAMP and TX-RAMP records stored on these listings. Scope is shown exactly as stored (listing or platform-only). Confirm current status on each registry.
| Agent | Program | Product | Status | Id | Scope | Source |
|---|---|---|---|---|---|---|
 Darktrace Cyber AI Analyst | TX-RAMP | Active AI Security Platform | Provisional (provisional expiry 2027-05-08) | TX1896215 | platform-only | Registry |
| Darktrace Cyber AI Analyst | GovRAMP | Cyber AI Mission Defense and Email Protection (Darktrace Federal) | In Process (Progressing Product List) | — | platform-only | Registry |
 CrowdStrike Charlotte AI | TX-RAMP | Falcon Platform | Level 2 | TX985428 | platform-only | Registry |
| CrowdStrike Charlotte AI | GovRAMP | CrowdStrike Falcon Platform for Government | Authorized · High | — | platform-only | Registry |
 Sophos MDR AI Agents (Triage and Case Investigation) | TX-RAMP | Sophos Cloud | Level 2 | TX1138700 | platform-only | Registry |
 Dropzone AI SOC Analyst | TX-RAMP | Dropzone AI, agentic soc | Level 2 | TX1957118 | listing | Registry |
 Torq AI SOC Platform (Socrates and HyperAgents) | TX-RAMP | Torq AI SOC Platform | Level 1 | TX1915837 | listing | Registry |
| A Andesite Human-AI SOC (Azimuth for Government) | FedRAMP | Andesite Azimuth for Government | FedRAMP Authorized · High | FR2520950455 | listing | Registry |
| A Andesite Human-AI SOC (Azimuth for Government) | TX-RAMP | Andesite Azimuth for Government AAG | Level 2 | TX1890122 | listing | Registry |
 ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) | FedRAMP | GreyMatter for Government | FedRAMP Authorized · Moderate | FR2428740308 | listing | Registry |
| ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) | TX-RAMP | ReliaQuest GreyMatter | Level 2 | TX1443548 | listing | Registry |
 SentinelOne Purple AI (agentic AI security analyst) | FedRAMP | SentinelOne Singularity Platform High | FedRAMP Authorized · High | FR1919071020A | listing | Registry |
| SentinelOne Purple AI (agentic AI security analyst) | TX-RAMP | SentinelOne Singularity Platform High | Level 2 | TX1266599 | listing | Registry |
| SentinelOne Purple AI (agentic AI security analyst) | GovRAMP | SentinelOne Singularity Platform | Authorized · High | — | listing | Registry |
 Abnormal AI Security Mailbox (Abnormal AI for Government) | FedRAMP | Abnormal AI for Government | FedRAMP Authorized · Moderate | FR2425960757 | listing | Registry |
| Abnormal AI Security Mailbox (Abnormal AI for Government) | TX-RAMP | Abnormal AI for Government | Level 2 | TX1890118 | listing | Registry |
| Abnormal AI Security Mailbox (Abnormal AI for Government) | TX-RAMP | Abnormal AI | Level 2 | TX1227626 | listing | Registry |
| Abnormal AI Security Mailbox (Abnormal AI for Government) | GovRAMP | Abnormal AI for Government | Authorized · Moderate | — | listing | Registry |
 TrendAI Vision One Agentic SIEM and Companion | TX-RAMP | Trend Micro Vision One for Government | Level 2 | TX1443251 | platform-only | Registry |
| TrendAI Vision One Agentic SIEM and Companion | GovRAMP | Trend Micro Vision One for Government | Authorized · Moderate | — | platform-only | Registry |
 Google Security Operations Triage and Investigation Agent | FedRAMP | Google Services (Google Cloud Platform Products and underlying Infrastructure) | FedRAMP Authorized · High | FR1805751477 | platform-only | Registry |
| | FedRAMP | Datadog for Government | FedRAMP Authorized · High | FR2023864279A | platform-only | Registry |
| | TX-RAMP | Datadog for Government | Level 2 | TX985429 | platform-only | Registry |
| | GovRAMP | Datadog for Government | Authorized · High | — | platform-only | Registry |
 Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) | TX-RAMP | Managed Detection and Response/Managed Risk | Level 2 | TX1151665 | platform-only | Registry |
 AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation) | FedRAMP | AppOmni SaaS Security for Government | FedRAMP Authorized · Moderate | FR2431264500 | platform-only | Registry |
FAQ (from this dataset)
What are alternatives to Darktrace Cyber AI Analyst?
Verified listings grouped with Darktrace Cyber AI Analyst on this page include CloudSEK AI Agents, CrowdStrike Charlotte AI, Qevlar AI, Sophos MDR AI Agents (Triage and Case Investigation), Dropzone AI SOC Analyst, Torq AI SOC Platform (Socrates and HyperAgents), Sekoia Elevate (AI SOC agents), Exaforce Exabots (agentic SOC), Andesite Human-AI SOC (Azimuth for Government), D3 Morpheus (agentic AI SOC platform), Imperum Virtus AI SOC agents (Triage, Pilot, Email Phishing), Prophet AI (AI SOC Analyst, Threat Hunter and Detection Engineer agents), 7AI agentic security platform, ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government), SentinelOne Purple AI (agentic AI security analyst), Abnormal AI Security Mailbox (Abnormal AI for Government), TrendAI Vision One Agentic SIEM and Companion, Cyble Blaze AI, Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR), Google Security Operations Triage and Investigation Agent, Microsoft Security Copilot Phishing Triage Agent (Defender), WedgeX AI SOC Agent, Attic IVON (Agentic MDR for Microsoft 365), Reliance Cyber RADAR, Datadog Bits AI Security Analyst, Securonix Sam, the AI SOC Analyst (Agentic Mesh), Swimlane AI SOC (Intelligent Deep Agents on Turbine), ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents), Fortinet FortiSOC (agentic AI SOC platform with FortiAI-Assist), Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents), NTT DOCOMO BUSINESS WideAngle AI SOC (AI Agent log analysis with managed SOAR auto-response), Zscaler Agentic SOC (specialized AI agents for triage, investigation and inline containment), Command Zero Agent Zero (autonomous security analyst), Bricklayer AI security agents (agentic platform for the AI security workforce), Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel), Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace), Spharaka Sphere (agentic AI SOC platform with autonomous investigation and policy-bounded response), Gambit Cyber Vizier AI and KnightGuard AI agents (agentic CTEM and security workflow automation), Crogl sovereign AI SOC (autonomous alert investigation, threat hunting and evidence-gated auto-remediation), Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents), HarkX Agentic AI SOC platform (multi-agent triage, threat hunting, investigation and automated response), Decanos AI Agents (Triage, Investigate, Hunt, Response and Compliance agents for autonomous security operations), RaonSecure OneSOAR (AI autonomous security control tower) and OneHacker (AI pentester) from the ONE AI agentic platform, CloudPeek agentic security operations platform (automatic triage, agent-run investigations and approval-gated response), Priam AVA (autonomous L1 alert triage and investigation agent with evidence-backed verdicts), CounterShadow AMI (Autonomous Machine Intelligence) – autonomous SOC triage, investigation and response, AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation), SOCRadar AI Agents (specialist threat-intelligence, attack-surface, digital-risk and alarm-triage agents), Strike48 agentic SecOps platform (pre-built SOC agent team and no-code agent builder over federated logs, cloud or air-gapped on-prem), Mave agentic SecOps (AI SOC agents). Order is a relevance grouping from dataset tags, not a ranking.
Which are headquartered in the UK or Europe?
Qevlar AI (France), Sophos MDR AI Agents (Triage and Case Investigation) (United Kingdom), Sekoia Elevate (AI SOC agents) (France), Imperum Virtus AI SOC agents (Triage, Pilot, Email Phishing) (Netherlands), Attic IVON (Agentic MDR for Microsoft 365) (Netherlands), Reliance Cyber RADAR (United Kingdom), Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) (Switzerland), Gambit Cyber Vizier AI and KnightGuard AI agents (agentic CTEM and security workflow automation) (Netherlands), Decanos AI Agents (Triage, Investigate, Hunt, Response and Compliance agents for autonomous security operations) (Germany), CloudPeek agentic security operations platform (automatic triage, agent-run investigations and approval-gated response) (United Kingdom), Priam AVA (autonomous L1 alert triage and investigation agent with evidence-backed verdicts) (United Kingdom), CounterShadow AMI (Autonomous Machine Intelligence) – autonomous SOC triage, investigation and response (United Kingdom).
Which hold a government authorization?
CrowdStrike Charlotte AI: TX-RAMP · Level 2 · Falcon Platform · TX985428 · scope platform-only; GovRAMP · Authorized · CrowdStrike Falcon Platform for Government · High · scope platform-only. Sophos MDR AI Agents (Triage and Case Investigation): TX-RAMP · Level 2 · Sophos Cloud · TX1138700 · scope platform-only. Dropzone AI SOC Analyst: TX-RAMP · Level 2 · Dropzone AI, agentic soc · TX1957118 · scope listing. Torq AI SOC Platform (Socrates and HyperAgents): TX-RAMP · Level 1 · Torq AI SOC Platform · TX1915837 · scope listing. Andesite Human-AI SOC (Azimuth for Government): FedRAMP · FedRAMP Authorized · Andesite Azimuth for Government · FR2520950455 · High · scope listing; TX-RAMP · Level 2 · Andesite Azimuth for Government AAG · TX1890122 · scope listing. ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government): FedRAMP · FedRAMP Authorized · GreyMatter for Government · FR2428740308 · Moderate · scope listing; TX-RAMP · Level 2 · ReliaQuest GreyMatter · TX1443548 · scope listing. SentinelOne Purple AI (agentic AI security analyst): FedRAMP · FedRAMP Authorized · SentinelOne Singularity Platform High · FR1919071020A · High · scope listing; TX-RAMP · Level 2 · SentinelOne Singularity Platform High · TX1266599 · scope listing; GovRAMP · Authorized · SentinelOne Singularity Platform · High · scope listing. Abnormal AI Security Mailbox (Abnormal AI for Government): FedRAMP · FedRAMP Authorized · Abnormal AI for Government · FR2425960757 · Moderate · scope listing; TX-RAMP · Level 2 · Abnormal AI for Government · TX1890118 · scope listing; TX-RAMP · Level 2 · Abnormal AI · TX1227626 · scope listing; GovRAMP · Authorized · Abnormal AI for Government · Moderate · scope listing. TrendAI Vision One Agentic SIEM and Companion: TX-RAMP · Level 2 · Trend Micro Vision One for Government · TX1443251 · scope platform-only; GovRAMP · Authorized · Trend Micro Vision One for Government · Moderate · scope platform-only. Google Security Operations Triage and Investigation Agent: FedRAMP · FedRAMP Authorized · Google Services (Google Cloud Platform Products and underlying Infrastructure) · FR1805751477 · High · scope platform-only. Datadog Bits AI Security Analyst: FedRAMP · FedRAMP Authorized · Datadog for Government · FR2023864279A · High · scope platform-only; TX-RAMP · Level 2 · Datadog for Government · TX985429 · scope platform-only; GovRAMP · Authorized · Datadog for Government · High · scope platform-only. Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents): TX-RAMP · Level 2 · Managed Detection and Response/Managed Risk · TX1151665 · scope platform-only. AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation): FedRAMP · FedRAMP Authorized · AppOmni SaaS Security for Government · FR2431264500 · Moderate · scope platform-only.
Is there a Darktrace vs CrowdStrike Charlotte AI comparison?
Yes. See the CrowdStrike Charlotte AI vs Darktrace Cyber AI Analyst pair page and the AI SOC and security-analyst agents table. CrowdStrike Charlotte AI vs Darktrace Cyber AI Analyst · AI SOC table.
All category-sharing alternatives
| Agent | Category | Shared frameworks (vendor-stated) | Pair page | Add |
|---|---|---|---|---|
 7AI agentic security platform Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE). | Security | — | Darktrace Cyber AI Analyst vs 7AI agentic security platform | |
| Abnormal AI Security Mailbox (Abnormal AI for Government) Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. | Security | — | Darktrace Cyber AI Analyst vs Abnormal AI Security Mailbox | |
 Adaptive Security Agentic Email Security and Phish Triage API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training. | Security | — | Darktrace Cyber AI Analyst vs Adaptive Security Agentic Email Security and Phish Triage | |
 Aikido Attack AI Pentesting Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report. | Security | — | Darktrace Cyber AI Analyst vs Aikido Attack AI Pentesting | |
 AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing. | Security | — | Darktrace Cyber AI Analyst vs AIpentix | |
| A Andesite Human-AI SOC (Azimuth for Government) Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. | Security | — | Darktrace Cyber AI Analyst vs Andesite Human-AI SOC | |
 Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents) Intelligence-native agentic SOC layer: ThreatStream Next-Gen and the Anomali Data Lake ship with autonomous triage, scoring and investigation steps, Tier 1/2 triage agents, a stack-ranked decision queue and automated Priority Intelligence Requirement monitoring, with analysts setting how much autonomy the agents get. | Security | — | Darktrace Cyber AI Analyst vs Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake | |
| AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation) US SaaS-security product whose Marlin AI engine autonomously correlates posture, identity and threat signals across SaaS and AI apps, opens investigations without a prompt, and delivers expert-guided remediation steps so teams can cut investigation and resolution time. | Security | — | Darktrace Cyber AI Analyst vs AppOmni Marlin AI | |
| Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) Agent-led managed SOC on the Aurora Superintelligence Platform: a 'Swarm of Experts' of oversight, authoritative and process agents runs triage, investigation, response, threat hunting, threat intel and detection engineering, with Arctic Wolf's human experts in the loop for novel cases and critical decisions. | Security | — | Darktrace Cyber AI Analyst vs Arctic Wolf Aurora Agentic SOC | |
 Ares Cyber agentic AI security testing platform (autonomous exploit chaining and runtime verification across SAST, SCA, DAST, VA and pentest) Rome security-testing platform that runs SAST, SCA, IaC/secrets, DAST, vulnerability assessment and penetration testing as one pipeline, in which AI agents autonomously chain vulnerabilities and safely run exploits to prove which findings are exploitable, available as SaaS, self-hosted or an air-gapped appliance. | Security | — | Darktrace Cyber AI Analyst vs Ares Cyber agentic AI security testing platform | |
 Atomicwork IGA Agent (agentic access provisioning on Atomicwork's AI Workforce) AI coworker on Atomicwork's agentic ITSM/ESM platform that handles access requests end to end: it reviews context, applies policy, routes approvals to the right owners in Slack or Teams, provisions and deprovisions access and enforces just-in-time access, acting without human intervention unless policy requires it. Listed tools include Okta, Azure AD, Google Workspace, JumpCloud and Microsoft Intune. | Security | — | Darktrace Cyber AI Analyst vs Atomicwork IGA Agent | |
 Attic IVON (Agentic MDR for Microsoft 365) Dutch AI SOC agent for Microsoft 365 SMBs that triages, investigates and contains identity alerts across Defender, Sentinel and Entra ID with human sign-off. | Security | — | Darktrace Cyber AI Analyst vs Attic IVON | |
 AWS Continuum for penetration testing (formerly AWS Security Agent) AWS frontier agent (formerly AWS Security Agent) that runs on-demand penetration tests of your applications with tailored multi-step attack scenarios, reproducible proof and ready-to-implement fixes, billed per task-hour. | Security | — | Darktrace Cyber AI Analyst vs AWS Continuum for penetration testing | |
 Barracuda Integrated Email Protection agentic threat investigation and clawback (BarracudaONE) API-based email security for Microsoft 365 and Google Workspace in which AI agents triage threat activity, correlate cross-domain BarracudaONE signals and run real-time, tenant-wide clawback of malicious messages after delivery without SOC intervention, with Bailey AI explaining every verdict and action. | Security | — | Darktrace Cyber AI Analyst vs Barracuda Integrated Email Protection agentic threat investigation and clawback | |
 Beelzebub Arcangelo (IASM/EASM with agentic penetration testing) Italian AI-native offensive platform product: Arcangelo continuously maps internal and external attack surfaces, then runs adaptive multi-stage agentic penetration tests that plan and pivot like an attacker, with potentially intrusive exploitation kept human-approved and auditable. | Security | — | Darktrace Cyber AI Analyst vs Beelzebub Arcangelo | |
 Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) AI SOC agent inside Blackpoint's managed ITDR service that autonomously contains high-confidence credential attacks on Microsoft 365 and Google Workspace accounts: it suspends the account, forces a password reset, ends active sessions and logs its reasoning, and escalates anything below its confidence threshold to a human SOC analyst. Generally available since July 8, 2026. | Security | — | Darktrace Cyber AI Analyst vs Blackpoint AI SOC Agent for ITDR | |
 Bricklayer AI security agents (agentic platform for the AI security workforce) Agentic cybersecurity platform that deploys, coordinates and governs teams of role-based and tool-specialist AI agents to triage alerts, investigate incidents, run threat-intelligence and threat-hunting work and track vulnerability remediation inside analyst-approved procedures, with every agent action auditable. | Security | — | Darktrace Cyber AI Analyst vs Bricklayer AI security agents | |
 C1 Autonomous Worker and C1 Agents (identity governance AI agent, formerly ConductorOne) Governed AI agent on C1's identity platform that carries out identity work end to end from a plain-language request (revoking stale admin grants, building access reviews, assembling audit evidence on who reached production, finding orphaned entitlement owners), acting only within the operator's own permissions and logging every action. | Security | — | Darktrace Cyber AI Analyst vs C1 Autonomous Worker and C1 Agents | |
 Cakewalk Agent Cake (AI agent for SaaS access provisioning, deprovisioning and conversational access requests) Berlin identity-governance vendor's AI agent: once access is approved under the customer's policies, Agent Cake provisions seats in supported apps on the admin's behalf, removes all accounts during offboarding, and lets employees request access conversationally in Slack, inside a platform that discovers apps and AI agents beyond SSO. | Security | — | Darktrace Cyber AI Analyst vs Cakewalk Agent Cake | |
 Check Point Agentic Exposure Validation (AEV, AI agents that prove external exploitability) Part of Check Point Exposure Management, launched May 28, 2026. AI agents reason like attackers across an organisation's external attack surface, correlating exposures, leaked credentials, CVE and live exploit research with existing protection coverage, then safely prove, pivot on, or discard each finding, so teams get evidence of what is actually exploitable. | Security | — | Darktrace Cyber AI Analyst vs Check Point Agentic Exposure Validation | |
 Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) Check Point's API-based, prevention-first email and collaboration security (Harmony Email & Collaboration, formerly Avanan) for Microsoft 365, Gmail, Teams, Slack and file-sharing apps. Check Point says autonomous AI agents investigate threats, correlate activity into campaigns, prioritise incidents and orchestrate remediation. Check Point Infinity Platform for Government (which includes Harmony Email) is FedRAMP Moderate and GovRAMP Authorized at platform level; Check Point Harmony is TX-RAMP Level 2 — none of those registry rows name the AI agents. | Security | — | Darktrace Cyber AI Analyst vs Check Point Email Security AI agents | |
 Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) Oslo-built agentic cloud operations platform whose agents find cloud security and compliance issues, investigate across cloud state and IaC, write the Terraform/Bicep fix, validate it with a plan and policy checks and open a pull request, then verify the fix after it lands. The Compliance Remediation Agent works from Prowler, Security Hub, Defender and Checkov findings against CIS, SOC 2, ISO 27001 and NIS2. Autonomy is set by policy. | Security | — | Darktrace Cyber AI Analyst vs Cloudgeni cloud agents | |
 CloudPeek agentic security operations platform (automatic triage, agent-run investigations and approval-gated response) UK agentic SOC platform that sits on top of existing SIEM, cloud, endpoint and threat-intelligence tools: it automatically triages every new alert, runs AI-agent follow-up investigations across connected tools, writes the incident summary and can act within per-workflow authority levels (advise, approve, act), including in on-premises or fully air-gapped deployments. | Security | — | Darktrace Cyber AI Analyst vs CloudPeek agentic security operations platform | |
 CloudSEK AI Agents Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows. | Security | — | Darktrace Cyber AI Analyst vs CloudSEK AI Agents | |
 Co-Brain Questionnaire Agent (security questionnaire automation) German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval. | Security | — | Darktrace Cyber AI Analyst vs Co-Brain Questionnaire Agent | |
 CodeWall autonomous attack agents (continuous external adversarial testing) UK offensive-security product that deploys autonomous attack agents starting from the outside with no credentials or source code: specialist agents investigate in parallel, share discoveries on a persistent investigation graph, prove exploitable paths across applications, identities and data, and retest within authorised scope as the environment changes. | Security | — | Darktrace Cyber AI Analyst vs CodeWall autonomous attack agents | |
 Command Zero Agent Zero (autonomous security analyst) Autonomous and AI-assisted SOC investigation platform from Austin, Texas. Its LLM agent, Agent Zero, investigates alerts end to end across identity, endpoint, cloud, email and SaaS, auto-closes routine cases with documented reasoning, and escalates the rest with a replayable chain of evidence for analysts to confirm or override. | Security | — | Darktrace Cyber AI Analyst vs Command Zero Agent Zero | |
 Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | — | Darktrace Cyber AI Analyst vs Conveyor | |
 Corma AI agents (browser-based identity lifecycle, provisioning and access automation) French identity and SaaS-management product whose custom AI agents automate joiner-mover-leaver provisioning, offboarding and other identity actions in web apps even when no API, SCIM or SAML is available, using a browser-based agent that interprets the admin UI and executes the workflow steps. | Security | — | Darktrace Cyber AI Analyst vs Corma AI agents | |
| Palo Alto Networks' agentic layer for Cortex: prebuilt and custom security agents that investigate and resolve cloud and SOC issues across Cortex Cloud, XSIAM and XDR, with configurable autonomy and approvals. | Security | — | Darktrace Cyber AI Analyst vs Cortex AgentiX | |
 CounterShadow AMI (Autonomous Machine Intelligence) – autonomous SOC triage, investigation and response UK autonomous SOC product: AMI plans and runs investigation of every SIEM/EDR alert across connected tools without playbooks, returns a true/false-positive verdict with severity and logged evidence in about eight minutes, and can isolate hosts, block IPs or disable accounts under approvals the customer configures. | Security | — | Darktrace Cyber AI Analyst vs CounterShadow AMI | |
| Self-hosted AI SOC whose agents pick up alerts from SIEM, SOAR and ticketing queues, investigate each one end to end across the customer's own tools, hunt threats and investigate advisories, and only trigger SOAR playbooks once an evidence gate is passed, with a full audit trail for the analyst's decision. | Security | — | Darktrace Cyber AI Analyst vs Crogl sovereign AI SOC | |
| CrowdStrike Charlotte AI Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows. | Security | — | Darktrace Cyber AI Analyst vs CrowdStrike Charlotte AI | |
 Cyble Blaze AI Multi-agent cybersecurity engine across Cyble's threat-intelligence, endpoint and cloud products: agents hunt, correlate IOCs, isolate endpoints, block domains and draft reports, with human-in-the-loop guardrails. | Security | — | Darktrace Cyber AI Analyst vs Cyble Blaze AI | |
 D3 Morpheus (agentic AI SOC platform) Agentic SOC platform that autonomously triages, investigates and responds across the full alert lifecycle, grading every verdict by its evidence and deferring to a human when uncertain. | Security | — | Darktrace Cyber AI Analyst vs D3 Morpheus | |
| AI agent in Datadog Cloud SIEM that autonomously investigates security signals and returns evidence-backed Benign or Suspicious verdicts. | Security | — | Darktrace Cyber AI Analyst vs Datadog Bits AI Security Analyst | |
| Berlin security platform whose specialist AI agents triage alerts, assemble investigations, run continuous threat hunts, execute containment and update compliance reporting across connected tools such as CrowdStrike, Splunk, Elastic, SentinelOne, Microsoft Sentinel and Wiz, with autonomy levels, escalation thresholds and approval gates set per agent and per action type. | Security | — | Darktrace Cyber AI Analyst vs Decanos AI Agents | |
 Doppel agentic social engineering defense (Email Security, Phishing Triage and agentic takedowns) Social engineering defense platform where AI agents triage employee-reported phishing, remove malicious mail automatically, tune email detection policies and trace phishing back to its sending infrastructure and links to execute takedowns, alongside brand-impersonation takedowns across web, social, ads and app stores. | Security | — | Darktrace Cyber AI Analyst vs Doppel agentic social engineering defense | |
| Dropzone AI SOC Analyst AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst. | Security | — | Darktrace Cyber AI Analyst vs Dropzone AI SOC Analyst | |
 Edgescan Atomic (agentic autonomous penetration testing in the Edgescan platform) Autonomous penetration testing built into the Dublin-based Edgescan platform, launched October 7, 2026. A team of narrow AI agents plans, adapts, chains vulnerabilities and validates real impact on web applications, using Edgescan's existing asset context and findings, while a deterministic 'Harness' enforces scope, permissions, approvals and allowed actions. Findings land alongside Edgescan's DAST, PTaaS and ASM results. | Security | — | Darktrace Cyber AI Analyst vs Edgescan Atomic | |
 Equixly Agentic AI Hacker (continuous API pentesting) Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation. | Security | — | Darktrace Cyber AI Analyst vs Equixly Agentic AI Hacker | |
 Ethiack Hackian (agentic AI pentesting) Portuguese autonomous pentesting platform: the Hackian agentic AI maps the attack surface, runs exploitation routines, chains attack paths and delivers proof-of-exploit with compliance-ready reports. | Security | — | Darktrace Cyber AI Analyst vs Ethiack Hackian | |
 Exaforce Exabots (agentic SOC) Four role-based AI agents (Detect, Triage, Investigate, Respond) on Exaforce's own security data platform, covering detection engineering, tier-3 triage, threat hunting and playbook-driven response with approval gates. | Security | — | Darktrace Cyber AI Analyst vs Exaforce Exabots | |
 Filigran XTM One (CTEM AI agents and autonomous attack chaining for OpenCTI and OpenAEV) Agentic AI layer for Filigran's open-source threat-intelligence (OpenCTI) and exposure-validation (OpenAEV) platforms: pre-built agents turn threat intelligence into hunting packages, detection rules and attack scenarios, and an autonomous attack-chaining orchestrator plans, runs and adapts an AI penetration test against an authorized environment, with optional human approval for sensitive actions. | Security | — | Darktrace Cyber AI Analyst vs Filigran XTM One | |
 Fleuret agentic AI pentesting (Émile multi-agent orchestrator for web apps and APIs) Paris-based agentic pentesting platform in which the Émile orchestrator coordinates 12-60 specialist attack agents (auth bypass, IDOR, injection chains, business logic, privilege escalation) against web apps and APIs, reports only findings proven with a replayable proof of concept, and re-tests fixes, with EU-sovereign hosting. | Security | — | Darktrace Cyber AI Analyst vs Fleuret agentic AI pentesting | |
 Fortinet FortiSOC (agentic AI SOC platform with FortiAI-Assist) Cloud-delivered SOC platform (SIEM, SOAR, UEBA, ITDR, threat intelligence and case management in one SaaS) whose agentic AI investigates and correlates alerts across assets and identities, then recommends or executes response actions under analyst oversight. | Security | — | Darktrace Cyber AI Analyst vs Fortinet FortiSOC | |
 Gambit Cyber Vizier AI and KnightGuard AI agents (agentic CTEM and security workflow automation) Netherlands-headquartered continuous threat exposure management (CTEM) platform, KnightGuard, whose Vizier AI layer uses coordinated AI agents (CTI analyst, SOC analyst, red and blue team, ITOps) to monitor the attack surface, turn threat intel into deployable detections, validate them and orchestrate response. | Security | — | Darktrace Cyber AI Analyst vs Gambit Cyber Vizier AI and KnightGuard AI agents | |
| Google Security Operations Triage and Investigation Agent AI agent in Google Security Operations that autonomously investigates SIEM alerts and returns a verdict, confidence score, timeline and next steps. | Security | — | Darktrace Cyber AI Analyst vs Google Security Operations Triage and Investigation Agent | |
 Hadrian Nova (agentic pentesting) On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management. | Security | — | Darktrace Cyber AI Analyst vs Hadrian Nova | |
 HarkX Agentic AI SOC platform (multi-agent triage, threat hunting, investigation and automated response) Bengaluru-built AI-native SOC platform in which specialised AI agents correlate and score alerts, run scheduled threat hunts, investigate cases and execute containment and automated response actions across SIEM, EDR/XDR, cloud and SOAR tools, with multi-tenant support for MSSPs. | Security | — | Darktrace Cyber AI Analyst vs HarkX Agentic AI SOC platform | |
 Horizon3.ai NodeZero (autonomous pentesting) Autonomous pentesting platform that runs unlimited self-directed internal, external, cloud, Kubernetes and AD pentests, plans attack paths, guides remediation and re-tests to verify fixes. | Security | — | Darktrace Cyber AI Analyst vs Horizon3.ai NodeZero | |
 Hoxhunt Respond (automated phishing incident response) Finnish human-risk platform whose Respond module automatically investigates every employee-reported email, groups related reports into one campaign incident, suppresses safe and duplicate reports, and removes confirmed malicious messages from all affected inboxes without waiting for an analyst. | Security | — | Darktrace Cyber AI Analyst vs Hoxhunt Respond | |
 Imperum Virtus AI SOC agents (Triage, Pilot, Email Phishing) Amsterdam-built autonomous SOC platform whose Virtus agents triage every alert through a 7-stage pipeline, return a verdict with confidence and evidence, and hand cases to an investigation agent, with sovereign/on-prem AI options. | Security | — | Darktrace Cyber AI Analyst vs Imperum Virtus AI SOC agents | |
 Intruder AI Pentesting On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings. | Security | — | Darktrace Cyber AI Analyst vs Intruder AI Pentesting | |
 Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) API-based email security for Microsoft 365 and Google Workspace that runs three AI agents: a Phishing SOC Agent for L2-style forensic investigation of suspicious emails, a Red Teaming Agent that models attacks aimed at your organisation and hardens detection, and a Phishing Simulation Agent. Plans include agentic autonomous remediation. | Security | — | Darktrace Cyber AI Analyst vs Ironscales AI agents | |
 Keepnet Incident Responder AI agent (phishing incident response and agentic security awareness) Human risk management platform whose AI agent reviews user-reported emails, opens investigations and proposes next steps in Incident Responder, with every action held in a human approval queue; the same agent builds and runs phishing simulations and awareness training. Per-user pricing is published. | Security | — | Darktrace Cyber AI Analyst vs Keepnet Incident Responder AI agent | |
 KnowBe4 AIDA (AI Defense Agents) Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes). | Security | — | Darktrace Cyber AI Analyst vs KnowBe4 AIDA | |
 Lumos Albus and Identity Agent Force (identity governance agents) AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision. | Security | — | Darktrace Cyber AI Analyst vs Lumos Albus and Identity Agent Force | |
 ManageEngine Endpoint Central Zia Agents (EDR Event Triage, Device Investigation and Patch Troubleshooting agents) Prebuilt AI agents in ManageEngine Endpoint Central that triage EDR events (MITRE ATT&CK mapping, prioritized next steps), investigate device problems and diagnose failed patches, plus Agent Studio for custom endpoint agents. | Security | — | Darktrace Cyber AI Analyst vs ManageEngine Endpoint Central Zia Agents | |
 ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents) AI agents inside ManageEngine's Log360 Cloud SIEM: an Investigation Agent that runs multi-stage alert investigations and writes an investigation report, prebuilt Alert Correlation and User Activity Review agents, and a no-code Agent Studio for custom SOC agents. | Security | — | Darktrace Cyber AI Analyst vs ManageEngine Log360 Cloud Zia Agents | |
 Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent) Cloud workspace security for Google Workspace and Microsoft 365 with an AI agent that triages, clusters and remediates user-reported phishing across the organisation, plus an OAuth Remediation Agent that investigates third-party app and AI-agent grants and can revoke tokens on its own. Per-user pricing is published. | Security | — | Darktrace Cyber AI Analyst vs Material Security AI agents | |
 Mave agentic SecOps (AI SOC agents) Agentic SecOps platform whose governed AI agents investigate every alert across the security tools a company already runs, hunt threats, improve detections and trigger authorised response actions, without ingesting data into a new lake; teams set policies, permissions and approval gates. | Security | — | Darktrace Cyber AI Analyst vs Mave agentic SecOps | |
 Maze AI Agents (Maze Cloud and Maze Code) UK AI agents that investigate every cloud and code vulnerability with code-to-cloud context, decide exploitability and deliver fixes. | Security | — | Darktrace Cyber AI Analyst vs Maze AI Agents | |
 Microsoft Entra Conditional Access Optimization Agent Security Copilot agent in Microsoft Entra that scans a tenant for users, apps and agent identities not covered by Conditional Access, recommends or updates policies and applies one-click remediation. | Security | — | Darktrace Cyber AI Analyst vs Microsoft Entra Conditional Access Optimization Agent | |
 Microsoft Security Copilot Phishing Triage Agent (Defender) Security Copilot agent in Microsoft Defender that autonomously triages user-reported phishing, resolves false positives and explains each verdict. | Security | — | Darktrace Cyber AI Analyst vs Microsoft Security Copilot Phishing Triage Agent | |
 Mindflow AI Agents (agentic SecOps/ITOps automation) No-code agentic automation platform for SecOps, ITOps and CloudOps: mission-oriented AI agents that reason and act across 4,000+ integrations, with RBAC, approval steps and full audit logs. | Security | — | Darktrace Cyber AI Analyst vs Mindflow AI Agents | |
 Mondoo Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates. | Security | — | Darktrace Cyber AI Analyst vs Mondoo | |
 Nagomi AI Exposure Eliminators (Agentic Exposure Operations: autonomous exposure investigation, one-click neutralization and validated closure) Agentic exposure-operations platform whose AI Exposure Eliminators continuously discover exposures across identity, attack surface, control gaps and vulnerabilities, investigate which attack paths are actually exploitable given existing controls, pick the neutralization path (config hardening, control deployment or patch) for one-click approval, route the work and verify from the sensor that the fix holds. | Security | — | Darktrace Cyber AI Analyst vs Nagomi AI Exposure Eliminators | |
 noze CyberAgent (AI agent for continuous attack-surface monitoring, automated validation pentesting and NIS2 evidence) Italian agent for mid-sized companies and NIS2 entities without an in-house SOC: after verifying domain control it continuously discovers assets and assesses network, web apps and APIs, correlates findings with EPSS and CISA KEV, confirms exploitability with automated validation pentests, ranks risks by business impact and prepares NIS2, DORA and ISO 27001 reports; the team decides what to fix. | Security | — | Darktrace Cyber AI Analyst vs noze CyberAgent | |
 NTT DOCOMO BUSINESS WideAngle AI SOC (AI Agent log analysis with managed SOAR auto-response) Japanese managed AI SOC service in which NTT DOCOMO BUSINESS's own AI Agent periodically reviews Microsoft Sentinel incidents, correlates endpoint, network and authentication logs and writes an analysis report back, and Sentinel's managed SOAR playbooks then respond to the alerts automatically, with NTT security experts on call. | Security | — | Darktrace Cyber AI Analyst vs NTT DOCOMO BUSINESS WideAngle AI SOC | |
 Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) Zurich-headquartered managed detection and response provider for Microsoft Defender and Sentinel whose ION MXDR service uses a team of AI agents to run autonomous Tier 2-level incident investigations (aggregate telemetry, form and test hypotheses) before handing a step-by-step summary to an Ontinue Cyber Defender. | Security | — | Darktrace Cyber AI Analyst vs Ontinue ION MXDR autonomous investigations | |
 Opal Paladin AI identity agent in Opal that reviews access requests, investigates context and approves, denies or escalates with recorded reasoning. | Security | — | Darktrace Cyber AI Analyst vs Opal Paladin | |
 Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) French platform whose agents answer incoming security questionnaires, TISAX catalogues, DDQs and tenders from the customer's own evidence with document, page and version on every answer, score and gap-check the result and draft missing documents with the team before named sign-off, while its Reach product sends questionnaires to suppliers and chases non-responders automatically. | Security | — | Darktrace Cyber AI Analyst vs Optivalue.ai questionnaire agents | |
 Orca Security AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection. | Security | — | Darktrace Cyber AI Analyst vs Orca Security | |
 Patrowl Agentic AI Penetration Testing Continuous external pentesting in which Patrowl's AI agents correlate assets, threats and past evidence, choose the next test step every day, and route every finding through a certified pentester before it reaches you. | Security | — | Darktrace Cyber AI Analyst vs Patrowl Agentic AI Penetration Testing | |
 Penetrify AI penetration testing agent (automated web app and API pentests) Self-serve automated pentesting from Brno in which an AI agent maps a web app's attack surface, forms hypotheses, chains findings into multi-step attack scenarios (auth bypass, broken access control, exposed secrets) and writes up only what it can demonstrate, with published monthly plans and EU/GDPR data processing. | Security | — | Darktrace Cyber AI Analyst vs Penetrify AI penetration testing agent | |
 Pentera AI-powered exposure validation (automated pentesting with AI-guided attack execution) Security-validation platform that continuously runs automated, production-safe pentests across internal networks, the external attack surface, cloud and identity, web apps and APIs. AI guides attack execution in real time (adapting techniques, generating payloads, chaining exploits) while Pentera's deterministic engine keeps every action controlled and auditable; users can approve or stop execution within guardrails, and Pentera Resolve turns validated findings into automated remediation workflows. | Security | — | Darktrace Cyber AI Analyst vs Pentera AI-powered exposure validation | |
 Phished AI security agents (Report Triage, Orchestration, Simulation and Real-Time Protection agents) Belgian human-risk platform with a suite of AI agents that run the phishing training programme (orchestration, simulation, brand, supplier and deepfake simulation agents), triage every reported email with a verdict and a drafted reply, and check clicked links in an isolated environment in real time. New content needs admin approval and every action is logged. | Security | — | Darktrace Cyber AI Analyst vs Phished AI security agents | |
 Plerion Pleri (AI security engineer) Sydney-based cloud and AI security platform with Pleri, an agent that investigates findings, checks real exploitability, raises fix PRs and Jira tickets, and follows each change through to merge. | Security | — | Darktrace Cyber AI Analyst vs Plerion Pleri | |
 Priam AVA (autonomous L1 alert triage and investigation agent with evidence-backed verdicts) London-based agentic SOC product: AVA investigates every alert from SIEM/EDR/XDR sources by testing malicious and benign hypotheses against the customer's environment and closes it with a defensible verdict (true positive, false positive or inconclusive with the missing evidence named), producing an audit-ready investigation report for enterprise SOCs and MSSP/MDR teams. | Security | — | Darktrace Cyber AI Analyst vs Priam AVA | |
 Proofpoint Satori agents (Abuse Mailbox Agent and DLP Triage Agent) Agentic AI layer inside Proofpoint's platform. The Satori Abuse Mailbox Agent classifies every user-reported email that needs manual review (phish, malware, spam or clean) and can trigger configured quarantine or tagging workflows. A DLP Triage Agent does the same for data-loss alerts, with guardrails, chat explanations and audit logs. | Security | — | Darktrace Cyber AI Analyst vs Proofpoint Satori agents | |
 Prophet AI (AI SOC Analyst, Threat Hunter and Detection Engineer agents) Agentic AI SOC platform whose agents investigate every alert end to end, respond through scoped Agent Actions autonomously or with sign-off, hunt threats and tune detections. | Security | — | Darktrace Cyber AI Analyst vs Prophet AI | |
 Qevlar AI Autonomous AI SOC platform that triages, enriches and investigates security alerts across SIEM/XDR, EDR and other tools and returns a documented verdict for analysts. | Security | — | Darktrace Cyber AI Analyst vs Qevlar AI | |
| Agent marketplace inside Qualys Enterprise TruRisk Management where teams 'hire' AI agents that detect new exposures without scanning, safely validate exploitability, re-rank risk by active threat campaigns and run confidence-gated patch and patchless remediation with rollback and re-validation. | Security | — | Darktrace Cyber AI Analyst vs Qualys Cyber Risk Agents in Enterprise TruRisk Management | |
| Seoul security and authentication vendor's agentic AI products: OneSOAR runs security operations from natural-language commands, automates account changes for joiners, movers and leavers, and on detecting anomalous behaviour immediately executes autonomous defence such as account lock, session termination, MFA step-up and admin alerts; OneHacker runs continuous, autonomous AI penetration tests from Pentest-Graph scenarios with white-hacker verification. | Security | — | Darktrace Cyber AI Analyst vs RaonSecure OneSOAR and OneHacker from the ONE AI agentic platform | |
 Reliance Cyber RADAR UK agentic MDR platform on Google Security Operations with specialist AI agents for detection engineering, triage, response and self-healing, under human oversight. | Security | — | Darktrace Cyber AI Analyst vs Reliance Cyber RADAR | |
| ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate). | Security | — | Darktrace Cyber AI Analyst vs ReliaQuest GreyMatter Agentic Teammates | |
 Ridge Security RidgeGen (agentic AI red teaming) and RidgeBot Offensive-security vendor from Milpitas, California. Its on-premises, model-agnostic RidgeGen agent does agentic AI red teaming: it reasons through multi-step attack chains to find business-logic and non-CVE risks, verifies every finding with reproducible exploit evidence, gives fix guidance and re-runs to confirm fixes. It sits alongside RidgeBot automated pentesting. | Security | — | Darktrace Cyber AI Analyst vs Ridge Security RidgeGen and RidgeBot | |
 RunSybil Sybil (AI offensive security / autonomous pentesting) AI offensive security platform whose agents run black- or white-box autonomous pentests, chain vulnerabilities across code, APIs, cloud and infrastructure, reproduce every finding, and re-test on each deployment. | Security | — | Darktrace Cyber AI Analyst vs RunSybil Sybil | |
 SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | — | Darktrace Cyber AI Analyst vs SafeBase | |
 Securonix Sam, the AI SOC Analyst (Agentic Mesh) An AI SOC analyst built into the Securonix Unified Defense SIEM that triages, correlates and enriches alerts, writes investigation summaries and prepares cases, coordinated by the Agentic Mesh of specialized agents under human approval. | Security | — | Darktrace Cyber AI Analyst vs Securonix Sam, the AI SOC Analyst | |
 Sekoia Elevate (AI SOC agents) Agentic AI SOC analyst inside the Sekoia SOC platform: agents autonomously investigate every alert and case, show their reasoning and produce audit-ready reports for analyst validation. | Security | — | Darktrace Cyber AI Analyst vs Sekoia Elevate | |
| SentinelOne Purple AI (agentic AI security analyst) Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized. | Security | — | Darktrace Cyber AI Analyst vs SentinelOne Purple AI | |
 Simbian AI Pentest Agent An autonomous AI agent for on-demand, ongoing penetration testing that adapts its testing logic in real time and focuses findings on each customer's business context, developed with LRQA's pentesting methodology. | Security | — | Darktrace Cyber AI Analyst vs Simbian AI Pentest Agent | |
 Snyk Developer-first application security platform. Snyk Agent Fix validates AI-suggested fixes for Snyk Code findings, and the Evo Agentic AppSec agents (scanning, dependency firewall, security review, remediation and secrets) run Snyk's engines as tools. Several of these agents are still in preview. | Security | — | Darktrace Cyber AI Analyst vs Snyk | |
 SOCRadar AI Agents (specialist threat-intelligence, attack-surface, digital-risk and alarm-triage agents) Roster of specialist agents inside the SOCRadar threat-intelligence platform: customers deploy agents, set each one's skills, scope and access, and green-light sensitive steps. Agents cover threat-actor and ransomware intelligence, detection-rule writing, IoC enrichment, identity/credential exposure, vulnerability analysis, brand and dark-web monitoring, phishing-domain hunting, external attack surface and Shodan recon, and alarm triage that records verdicts and asks before changing an alarm's status. | Security | — | Darktrace Cyber AI Analyst vs SOCRadar AI Agents | |
 Sonrai WALLy (cloud privileged access management agent) Cloud PAM agent that works with Sonrai's Cloud Permissions Firewall across AWS and GCP. WALLy flags identities carrying privilege risk (overpermissioned roles, external accounts with IAM access, unused permissions), prioritises the fixes that cut the most risk, writes remediation policies (quarantine zombie identities, block third-party access, enforce just-in-time access, remove dangerous privileges) and stages them for a human to review and approve before deployment, then confirms the risk is closed. | Security | — | Darktrace Cyber AI Analyst vs Sonrai WALLy | |
| Sophos MDR AI Agents (Triage and Case Investigation) Sophos's managed detection and response service uses in-house AI agents for alert triage and case investigation, with Sophos analysts supervising and owning response decisions. | Security | — | Darktrace Cyber AI Analyst vs Sophos MDR AI Agents | |
 Spharaka Sphere (agentic AI SOC platform with autonomous investigation and policy-bounded response) Indian-built agentic SOC platform (SIEM, SOAR, UEBA, XDR and threat hunting in one) where AI agents triage and investigate every alert to a conclusion and execute containment inside a customer-defined policy envelope, staging higher-impact actions for a named approver. | Security | — | Darktrace Cyber AI Analyst vs Spharaka Sphere | |
 SQUR Autonomous Pentest (24-hour AI web and API pentesting with exploit verification) German autonomous pentesting product for web apps and APIs: given a target URL, scope and optional source code, its AI agents carry out real exploitation, a separate agent re-tests every finding against the live app to weed out false positives, and a compliance-ready report with proof-of-exploit and remediation steps arrives within 24 hours; continuous monthly runs mark findings fixed, regressed or new. | Security | — | Darktrace Cyber AI Analyst vs SQUR Autonomous Pentest | |
 Strike48 agentic SecOps platform (pre-built SOC agent team and no-code agent builder over federated logs, cloud or air-gapped on-prem) Agentic orchestration platform for SOC and IT teams from the company behind the Devo log platform: purpose-built micro agents triage and investigate alerts, analyse phishing, hunt threats, write and tune detections and help with compliance over logs queried in place across SIEMs and data lakes, with configurable human approval and an audit trail; available as SaaS, isolated compute or an air-gapped on-prem appliance. | Security | — | Darktrace Cyber AI Analyst vs Strike48 agentic SecOps platform | |
 StrongestLayer TRACE agents (Inbox Advisor, Threat Triage and Threat Hunt) AI-native email security for Microsoft 365 and Google Workspace in which a multi-LLM reasoning engine (TRACE) investigates each email's intent against your business context and blocks attacks. Three classes of agents give employees plain-English verdicts in Outlook and Gmail, send pre-investigated, MITRE-mapped cases to the SOC, and hunt and remediate across mailboxes. | Security | — | Darktrace Cyber AI Analyst vs StrongestLayer TRACE agents | |
 Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer) Email security platform whose AI agents triage user-reported and flagged emails end to end (ASA, with passive or active auto-remediation modes) and write backtested detections for new attacks (ADÉ), which default to one-click human approval and can auto-activate when they clear a precision threshold. Runs as SaaS or self-hosted in AWS, including GovCloud. | Security | — | Darktrace Cyber AI Analyst vs Sublime Security ASA and ADÉ | |
 Swimlane AI SOC (Intelligent Deep Agents on Turbine) Swimlane's AI SOC product, built on its Turbine automation platform, uses autonomous 'deep agents' to plan and run alert investigations, with explainable decisions, auditable actions and AI-generated plans that analysts can review and turn into playbooks. | Security | — | Darktrace Cyber AI Analyst vs Swimlane AI SOC | |
 Synack Sara AI Pentesting Synack's Autonomous Red Agent (Sara) for agentic pentesting, with exploitable findings validated by the Synack Red Team. | Security | — | Darktrace Cyber AI Analyst vs Synack Sara AI Pentesting | |
 Sysdig Agentic AI (Sysdig Secure AI agents) Outcome-driven AI agents inside Sysdig Secure for cloud and container security: Vuln, SOC, Posture, Risk and Response agents that investigate, prioritise and drive remediation on Falco-based runtime data. | Security | — | Darktrace Cyber AI Analyst vs Sysdig Agentic AI | |
 Tenable One (Hexa AI) Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows. | Security | — | Darktrace Cyber AI Analyst vs Tenable One | |
| Torq AI SOC Platform (Socrates and HyperAgents) Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation. | Security | — | Darktrace Cyber AI Analyst vs Torq AI SOC Platform | |
| TrendAI Vision One Agentic SIEM and Companion Trend Micro's SOC stack (now under the TrendAI brand) pairing an Agentic SIEM and Agentic SOAR with purpose-built agents and the Trend Companion AI assistant. | Security | — | Darktrace Cyber AI Analyst vs TrendAI Vision One Agentic SIEM and Companion | |
 Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) Specialised AI agents inside Upwind's runtime-first cloud security platform: Blue investigates threats to a verdict, Red proves which risks are exploitable, Green finds root-cause fixes and opens PRs, coordinated by Choppy. | Security | — | Darktrace Cyber AI Analyst vs Upwind AI Agentic Pack | |
 Vulnetic Sable (AI pentesting agent) Agentic pentesting agent for internal security teams and MSSPs. Sable plans and executes authorised tests against web applications, APIs, internal networks and Active Directory, runs real tools, proves impact with reproducible evidence and exploit traces, and supports targeted retests after remediation; teams steer it in plain language and can approve every command or let it run fully autonomously. | Security | — | Darktrace Cyber AI Analyst vs Vulnetic Sable | |
 WedgeX AI SOC Agent Australian AI SOC agent that enriches, investigates and recommends escalate/close actions on alerts, proposing containment for human approval. | Security | — | Darktrace Cyber AI Analyst vs WedgeX AI SOC Agent | |
 Wiz Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. | Security | — | Darktrace Cyber AI Analyst vs Wiz | |
 Wolfia Questionnaire Agent (security questionnaires and trust center) Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension. | Security | — | Darktrace Cyber AI Analyst vs Wolfia Questionnaire Agent | |
 YesWeHack Agentic Pentest On-demand pentests of external attack surface run by AI agents shaped by YesWeHack's bug-hunting expertise, with dedicated verification agents, a Pentest Manager, same-day results and reports in its vulnerability-management platform. | Security | — | Darktrace Cyber AI Analyst vs YesWeHack Agentic Pentest | |
 Zscaler Agentic SOC (specialized AI agents for triage, investigation and inline containment) AI-first security operations product launched September 2026. Specialized autonomous AI agents triage alerts, investigate root cause, assign evidence-backed verdicts and trigger response workflows, and Zscaler's inline Zero Trust controls can automatically isolate users, block command-and-control traffic and cut off lateral movement. | Security | — | Darktrace Cyber AI Analyst vs Zscaler Agentic SOC | |
 Aikido AI AutoFix Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ. | Code security | — | — | |
 AISLE (autonomous vulnerability discovery, triage and verified-fix agents) Prague-headquartered AI code-security platform in which thousands of agents analyse a codebase in parallel for exploitable vulnerabilities, fix agents write patches, and agentic verification builds the repo and runs tests before opening a pull request for human merge. October 2026 added agent-driven proof of exploitability against running web apps and APIs. Cohere signed a letter of intent to acquire AISLE on Oct 15, 2026. | Code security | — | — | |
 Amazon Q Developer security scanning Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes. | Code security | — | — | |
 Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) German AppSec product from Düsseldorf: a team of agents audits repositories (SAST, secrets, SCA, IaC, CI/CD) and cloud accounts, triages signals so only confirmed findings surface, pentests running apps inside a verified scope with a separate agent reproducing every finding, reviews pull requests with a merge-blocking status check, and opens fix pull requests that run your tests but never merge themselves. | Code security | — | — | |
 BigID (incl. AgentIQ agents) Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests. | Risk | — | — | |
 Black Duck Signal (agentic AI AppSec) Agentic AI application security tool (GA March 2026) with role- and task-based agents that analyse new code in any language, filter findings by exploitability and apply verified fixes, callable from Claude Code, Gemini and GitHub Copilot via MCP. | Code security | — | — | |
 Black Kite AI Agent Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach. | Risk | — | — | |
 Checkmarx One Assist Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel. | Code security | — | — | |
 CITSmart GRC.S (GRC + SecOps platform with AI agents that check deadlines and execute response actions) Brazilian GRC-plus-security-operations platform from Central IT: alerts from proxy, DNS, XDR, e-mail and identity tools are correlated and prioritised by AI, AI agents check deadlines, priorities and owners for each compliance or security demand, and AI agents execute checks and response actions in the environment (Cognitive Workflow), with LGPD, ISO 27001, NIST, CIS Controls 8 and ISO 42001 mapped out of the box. | Compliance | — | — | |
 Claude Code security review Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments. | Code security | — | — | |
 Codacy AI Reviewer Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes. | Code security | — | — | |
 Cursor Bugbot Cursor’s AI pull-request reviewer. Official docs say it identifies bugs, security issues and code-quality problems and comments with explanations and suggested fixes. | Code security | — | — | |
 CybeDefend Cybe AutoFix (AI code security agent that opens tested fix pull requests) French AI code security platform (SAST, SCA, IaC, container and secret scanning) whose Cybe AutoFix agent reads the code graph, rewrites vulnerable lines or picks the safest dependency upgrade, tests the change in isolation and opens a bot-signed, CI-gated pull request for a human to merge. | Code security | — | — | |
 Cycode AI Teammates (Exploitability, Remediation and Change Impact agents) Cycode's AppSec AI agents that assess the exploitability of findings, generate fixes, analyse change impact and query the risk graph inside the Cycode platform. | Code security | — | — | |
 Cytix agentic pentesting and automatic change approvals (change-driven software security) Manchester software-change security platform that risk-scores every code change, automatically approves changes that fall within the customer's own policy and escalates the rest, then sends sandboxed AI pentest agents against high-risk changes and logs every decision and tool call as an audit-ready change record. | Code security | — | — | |
 depthfirst autonomous security agents (code, supply chain, secrets and agentic pentesting) San Francisco application-security platform whose autonomous AI agents trace business logic and data flows to find exploitable code vulnerabilities, check dependency reachability and secrets, review pull requests with proposed fixes, and run agentic pentests against running applications, re-running each attack after a fix merges to confirm it is closed. | Code security | — | — | |
 Endor Labs security agents (agentic triage and remediation) Pre-built AppSec agents that read Endor findings against your source, write SAST fixes or file exceptions, pick safe dependency upgrades and open PRs, and answer malware-exposure and CI/CD posture questions inside your coding agents. | Code security | — | — | |
 Escape (AI pentesting and DAST) Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps. | Code security | — | — | |
 FlowForma Assure (AI agents for vendor risk assessment) Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed. | Risk | — | — | |
 GitHub Copilot Autofix LLM-generated suggested fixes for GitHub code-scanning alerts (CodeQL), plus agentic autofix (generally available 15 Oct 2026), where an alert is assigned to Copilot, which investigates, validates a fix and opens a pull request. Part of GitHub Code Security / Advanced Security. | Code security | — | — | |
 GitLab Duo Vulnerability Resolution GitLab Duo features that explain SAST vulnerabilities and open merge requests with proposed AI remediations, including an agentic resolution flow. | Code security | — | — | |
| Agentic AI triage and auto-fix for SAST findings in HCL AppScan: an LLM pass reviews each finding's accuracy and severity, filters false positives, and a deterministic codemod framework writes fixes in repos and pull requests. | Code security | — | — | |
| Indian autonomous DevSecOps agent that scans each commit, generates a secure patch and opens a human-approved pull request. | Code security | — | — | |
 Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent) Australian 'autonomous system of agents' for product security that covers code, secrets, API pentesting and exploit validation. It proves findings with reproducible evidence, scores them against the customer's assets, writes merge-ready fix PRs routed to code owners, and runs remediation campaigns through Jira and Slack until merge, with the customer keeping final merge approval. | Code security | — | — | |
 OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI) Free, self-hosted, open-source (AGPL-3.0) agent from India's OnFinance AI for banks, brokers, NBFCs, AMCs, insurers and fintechs. It runs 26 workflows of specialist agents that keep a company's regulatory profile current, probe repositories, infrastructure and vendors for gaps against SEBI, RBI, IRDAI, CERT-In and DPDP controls, and write findings (each citing a specific clause), remediation plans and audit reports into a validated, append-only ledger for human review. | Compliance | — | — | |
 Phoenix Purple (Phoenix Security) UK AI code-security agent platform with reachability-validated scanning, PR scanning, IDE/agent integrations and an agent that writes risk-tiered fix PRs. | Code security | — | — | |
 Pixee (automated triage and fix) Security 'harness' that triages SAST/SCA/DAST/secrets findings for exploitability, opens fix pull requests with the analysis attached, works inside coding agents, and builds design-stage threat models. | Code security | — | — | |
 Rescana autonomous TPRM agents (Discovery & Classification, Risk Assessment, Communication & Remediation and Manager agents) A third-party risk platform run by a coordinated team of AI agents. They discover and classify vendors from identity, procurement and IT systems, collect and analyse vendor documentation and questionnaires against external attack-surface intelligence, chase vendors for missing evidence and remediation, and orchestrate approvals with humans in control. | Risk | — | — | |
 Rippling Automated Compliance Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers. | Compliance | — | — | |
 RiskXchange The Agency (32 AI agents for third-party risk) AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor. | Risk | — | — | |
 SAFE TPRM AI Co-Worker Agentic third-party risk management: a swarm of 100+ specialised agents runs the vendor lifecycle from intake and due diligence through remediation, continuous monitoring and offboarding. | Risk | — | — | |
 Scytale AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles. | Compliance | — | — | |
 Secureframe Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. | Compliance | — | — | |
 SecurityScorecard Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation. | Risk | — | — | |
 Semgrep Multimodal Semgrep’s AI layer (successor branding to Semgrep Assistant) for detection, triage, remediation guidance and optional autofix on the Semgrep AppSec Platform. | Code security | — | — | |
 SonarQube AI CodeFix and Remediation Agent Sonar LLM-generated fix suggestions for a documented subset of SonarQube issues, in Cloud Team/Enterprise and Server Enterprise/Data Center editions. | Code security | — | — | |
 Sourcery AI code review and security scanning (PR review bot with merge-blocking security checks, auto-approval of low-risk PRs and nightly codebase scans) London AI code reviewer for GitHub and GitLab that reviews every pull request within minutes, flags security issues and suggests commit-ready fixes, fails the check on high-severity security findings so merging can be blocked, auto-approves low-risk PRs with no blocking findings, and scans whole repositories every night for vulnerable code, exposed secrets, misconfigured infrastructure and vulnerable dependencies. | Code security | — | — | |
 StackHawk Wingman (find-fix-verify security for AI coding agents) Security plugin for AI coding agents (Claude Code, Cursor, GitHub Copilot, Codex, Antigravity) that runs dynamic tests against the running app during the coding session, has the agent triage and fix what it finds, then rescans to prove the fix before the pull request. Published at US$10 per user per month. | Code security | — | — | |
 Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing) Japanese security AI agent that continuously finds vulnerabilities with AI-SAST and AI-DAST (including logic, authentication and authorisation flaws), generates fix patches and opens pull requests with unit tests, and runs AI penetration tests that actually attempt intrusion to prove exploitability. | Code security | — | — | |
 UpGuard Cyber risk and third-party risk management platform with published CRPM pricing page. | Risk | — | — | |
 Vanta Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. | Compliance | — | — | |
 Veracode Fix Veracode’s AI-assisted remediation for SAST flaws and SCA dependency vulnerabilities, with suggested patches in IDE, CLI and SCM workflows. | Code security | — | — | |
 VISO TRUST AI Agent (agentic third-party risk management) TPRM agent that launches due diligence as soon as a vendor is added, requests and renews SOC 2, ISO and pen-test artifacts, sends focused follow-ups, monitors breach advisories and drafts impact reports, escalating only exceptions to the team. | Risk | — | — | |
 Xygeni DevAI and CoreAI (agentic AppSec) Agentic AppSec from Valladolid-based Xygeni: DevAI scans code in the IDE and generates validated fixes (including for AI-generated code), while CoreAI prioritises risk and orchestrates remediation PRs across the platform. | Code security | — | — | |
 Zania Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability. | Compliance | — | — | |
| AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language. | Code security | — | — |
Order is mechanical (shared dataset tags, then same primary category) — a relevance order, not a ranking or quality judgement. Framework tags indicate relevance, not certification.