Skip to content
AI Cyber Compare

Fact table

AI SOC and SOAR vendor fact table

The short answer

All thirteen profiled vendors, side by side, with the facts from their public pages read in September 2026 and updated on 13 October 2026. Pick vendors with the chips to narrow the table; the link updates so you can share a selection. Nothing here is scored: a Not described cell means the vendor's pages did not describe it.

By The Triage Desk · AI Cyber Compare · Published 2026-10-08

Desk research from public vendor pages: vendor facts read September 2026, updated 2026-10-13. Editorial reading of what vendors publish; we did not run the products and did not interview vendors.

Which vendors do you want to compare?

FactMate Security7AIArtemis SecurityConifers CognitiveSOCCortex XSOARDropzone AIExaforceIntezerProphet SecuritySplunk SOARTinesTorq AI SOC PlatformVega
Model
Primary modelAI SOC analystAI SOC analystAI SOC analystAI SOC analystSOARAI SOC analystAI SOC analystAI SOC analystAI SOC analystSOARSOARAI SOC analystAI SOC analyst
Also reaches intoNoneMDRSOARMDRNoneAI SOC analystNoneMDRNoneMDRSIEM copilotAI SOC analystSOARSIEM copilot
Position on SOARReplaces SOARWorks beside SOARReplaces SOARReplaces SOARAdds AI inside SOARWorks beside SOARReplaces SOARWorks beside SOARReplaces SOARAdds AI inside SOARReplaces SOARReplaces SOARWorks beside SOAR
Work strip
Work strip for Mate Security: Triage, AI agent; Investigate, AI agent; Respond, shared; Tune, shared; Nights and weekends, not described.TriageAI agentInvestigateAI agentRespondSharedTuneSharedNights and weekendsNot described
Work strip for 7AI: Triage, AI agent; Investigate, AI agent; Respond, shared; Tune, shared; Nights and weekends, provider's analysts.TriageAI agentInvestigateAI agentRespondSharedTuneSharedNights and weekendsProvider's analysts
Work strip for Artemis Security: Triage, AI agent; Investigate, AI agent; Respond, shared; Tune, shared; Nights and weekends, provider's analysts.TriageAI agentInvestigateAI agentRespondSharedTuneSharedNights and weekendsProvider's analysts
Work strip for Conifers CognitiveSOC: Triage, AI agent; Investigate, AI agent; Respond, shared; Tune, shared; Nights and weekends, not described.TriageAI agentInvestigateAI agentRespondSharedTuneSharedNights and weekendsNot described
Work strip for Cortex XSOAR: Triage, rules you write; Investigate, shared; Respond, rules you write; Tune, your analysts; Nights and weekends, rules you write.TriageRules you writeInvestigateSharedRespondRules you writeTuneYour analystsNights and weekendsRules you write
Work strip for Dropzone AI: Triage, AI agent; Investigate, AI agent; Respond, rules you write; Tune, not described; Nights and weekends, AI agent.TriageAI agentInvestigateAI agentRespondRules you writeTuneNot describedNights and weekendsAI agent
Work strip for Exaforce: Triage, AI agent; Investigate, AI agent; Respond, shared; Tune, not described; Nights and weekends, provider's analysts.TriageAI agentInvestigateAI agentRespondSharedTuneNot describedNights and weekendsProvider's analysts
Work strip for Intezer: Triage, AI agent; Investigate, AI agent; Respond, shared; Tune, not described; Nights and weekends, not described.TriageAI agentInvestigateAI agentRespondSharedTuneNot describedNights and weekendsNot described
Work strip for Prophet Security: Triage, AI agent; Investigate, AI agent; Respond, shared; Tune, shared; Nights and weekends, provider's analysts.TriageAI agentInvestigateAI agentRespondSharedTuneSharedNights and weekendsProvider's analysts
Work strip for Splunk SOAR: Triage, rules you write; Investigate, rules you write; Respond, rules you write; Tune, your analysts; Nights and weekends, rules you write.TriageRules you writeInvestigateRules you writeRespondRules you writeTuneYour analystsNights and weekendsRules you write
Work strip for Tines: Triage, AI agent; Investigate, shared; Respond, shared; Tune, your analysts; Nights and weekends, not described.TriageAI agentInvestigateSharedRespondSharedTuneYour analystsNights and weekendsNot described
Work strip for Torq AI SOC Platform: Triage, AI agent; Investigate, AI agent; Respond, shared; Tune, shared; Nights and weekends, not described.TriageAI agentInvestigateAI agentRespondSharedTuneSharedNights and weekendsNot described
Work strip for Vega: Triage, AI agent; Investigate, AI agent; Respond, your analysts; Tune, shared; Nights and weekends, not described.TriageAI agentInvestigateAI agentRespondYour analystsTuneSharedNights and weekendsNot described
Capabilities
Runs response actions itselfDocumentedDocumentedDocumentedDocumentedDocumentedNot describedDocumentedDocumentedDocumentedDocumentedDocumentedDocumentedNot described
Approval or sign-off before actionsDocumentedDocumentedDocumentedDocumentedDocumentedNot describedDocumentedNot describedDocumentedDocumentedDocumentedNot describedNot described
Can act alone on some casesDocumentedDocumentedDocumentedDocumentedDocumentedNot describedDocumentedDocumentedDocumentedDocumentedDocumentedDocumentedNot described
Translates existing SOAR playbooksDocumentedNot describedNot describedNot describedNot describedNot describedNot describedNot describedNot describedNot describedNot describedNot describedNot described
Optional service where the vendor's people work the queueNot describedDocumentedDocumentedNot describedNot describedNot describedDocumentedNot describedDocumentedNot describedNot describedNot describedNot described
Multi-tenant or MSSP offeringNot describedNot describedNot describedDocumentedNot describedDocumentedNot describedNot describedNot describedNot describedNot describedNot describedNot described
On-premises, hybrid or your own cloud tenantNot describedNot describedNot describedDocumentedDocumentedNot describedNot describedNot describedNot describedDocumentedDocumentedNot describedNot described
Single-tenant optionNot describedNot describedNot describedNot describedNot describedDocumentedNot describedNot describedDocumentedNot describedNot describedNot describedNot described
Data residency optionNot describedNot describedNot describedDocumentedNot describedDocumentedNot describedNot describedNot describedNot describedNot describedNot describedNot described
Integration count publishedNot describedNot describedDocumentedDocumentedDocumentedDocumentedDocumentedDocumentedDocumentedDocumentedNot describedDocumentedNot described
Pricing unit or tiers publishedNot describedNot describedNot describedNot describedNot describedDocumentedNot describedDocumentedNot describedNot describedDocumentedNot describedNot described
Facts
IntegrationsNot publishedNot published240+ connectors (Artemis states), including Splunk, Splunk SOAR, Microsoft Sentinel, CrowdStrike NG-SIEM, Snowflake, AWS Athena, BigQuery, Entra ID, Okta, CrowdStrike, SentinelOne and Defender XDR.90+ (homepage). A May 2026 release said 60+.900+ prebuilt integrations and automation packs; thousands of security actions in the Marketplace.90+ across 14 categories, including SOAR tools (Cortex XSOAR, Splunk SOAR, Tines, Torq, D3 Security, IBM QRadar SOAR, Swimlane).130+ across IaaS, SaaS, identity, endpoint, SIEM, SOAR, email, ticketing, threat intel and AI.100+200+ out of the box.300+ third-party tools and 2,800+ automated actions.Not published300 pre-built integrations and 4,000+ pre-built steps, plus AI-generated integrations.Not published
DeploymentMate says it is built on AWS infrastructure and sells through AWS Marketplace. Its trust center lists Google Cloud and Amazon Web Services as cloud subprocessors. Self-hosted, customer-tenant or data residency options: not described.Available through the AWS Security Hub Extended plan (announced 26 February 2026). Self-hosted or on-premises: not described.Hot-path data ingested, high-volume data queried where it lives; on-premises execution of response actions described. Tenancy and residency: not described.SaaS on Conifers-hosted Azure, or private cloud in the customer's own Azure tenant; processing in the customer's chosen Azure region. Data regions: North America, Europe and, since July 2026, Singapore.Cortex XSOAR 8 SaaS, Cortex XSOAR 8 On-prem (end of life 30 September 2029 per Palo Alto documentation) and Cortex XSOAR 6.Standard service; Enterprise with a dedicated single-tenant environment; MSSP with a dedicated multi-tenant environment; EU data residency option.Not publishedNot publishedSingle-tenant; customer data in individual datastores; bring-your-own-key option; runs on AWS. On-premises: not described.Cloud, on-premises or hybrid.Shared stack, self-hosted or hybrid; Tines says AI features are available wherever Tines is deployed.Described as cloud-native. Other options: not described on the pages reviewed.Runs on Vega's Security Analytics Mesh against data where it lives; Vega says no migration, ingestion or egress. Tenancy and residency: not described.
PricingNot publishedNot publishedNot publishedNot publishedNot publishedPriced on investigation capacity ("Pay for the Investigation Capacity Your Team Needs"). Base subscription: up to 4,000 full investigations per year per AI analyst, unlimited users, all alert categories and pre-built integrations, 8-hour support SLA, volume discounts and extra capacity. Enterprise (single-tenant) and MSSP (multi-tenant, pooled AI analysts) by contact. No list price shown; a POC program is offered.Not publishedTwo tiers: Starter (one alert source) and Complete (all alert sources), both priced by endpoints with no volume fees. Prices: contact sales.Not publishedNot publishedFree edition: unlimited users and connectors, 3 live workflows, one-time $50 AI allowance. Paid editions: contact sales; startup program discounts.Not publishedNot published
ComplianceISO 27001:2022, SOC 2 Type II, HIPAA, CCPA and GDPR, per its trust center, which also lists a SOC 2 Type 2 report, a HIPAA completion letter, an ISO 27001 certificate, a 2026 pentest report and a disaster recovery drill report.SOC 2 Type II (security and confidentiality), audited by Decrypt Compliance. ISO 27001: not stated.Not reviewedSOC 2 Type II, ISO/IEC 27001Not reviewedSOC 2 Type IINot reviewedNot reviewedSOC 2 Type II (report on request)Not reviewedNot reviewedSOC 2 Type 2, HIPAA, ISO 27001, ISO 42001:2023 and German BSI C5 (the last two announced 5 December 2025).Not reviewed
Funding$15.5M seed (November 2025) and a $35M Series A (July 2026), per Mate's newsroom; investors listed: Canaan, Team8, Insight Partners, M12.7AI states $166M in total funding.$70M in seed and Series A funding at launch (15 April 2026); Series A led by Felicis.Not in our sourcesNot in our sources$37M Series B led by Theory Ventures, reported in Dropzone AI's January 2026 release.$75M Series A (April 2025) and $125M Series B (May 2026), per Exaforce's newsroom.Not in our sourcesNot in our sourcesNot in our sources$125M Series C at a $1.125B valuation, announced 11 February 2025.$70M Series C (September 2024); $140M Series D at a $1.2B valuation (January 2026). Acquired Jit (May 2026).Backed by Cyberstarts, Accel, Redpoint and CRV (founded 2024).
Links
ProfileRead the Mate profileRead the 7AI profileRead the Artemis profileRead the Conifers profileRead the XSOAR profileRead the Dropzone AI profileRead the Exaforce profileRead the Intezer profileRead the Prophet profileRead the Splunk SOAR profileRead the Tines profileRead the Torq profileRead the Vega profile
  • Your analysts
  • Rules you write
  • AI agent
  • Provider's analysts
  • Shared
  • Not described

Documented by every selected vendor: none. Documented by none of them: none.

Side by side pages for this selection

Asked often about this page

Why is there no total or score column?

This site does not score vendors. The fact table shows what each vendor documents so you can weigh it against your own needs; the fit finder does that weighing from your answers.

What does Not described mean?

The vendor's public pages, read in September 2026 and updated on 13 October 2026, did not describe that capability. It may exist; ask the vendor.

Why does Compliance say Not reviewed for some vendors?

We did not check those vendors' compliance pages for this edition. It does not mean they lack certifications.