Vendor profile
Exaforce profile: an agentic SOC you run or Exaforce runs
The short answer
By The Triage Desk · AI Cyber Compare · Published 2026-10-08
Desk research from public vendor pages: vendor facts read September 2026, updated 2026-10-13. Editorial reading of what vendors publish; we did not run the products and did not interview vendors.
Which operating model is Exaforce?
Primary model: AI SOC analyst platform.
It also reaches into: MDR Exaforce can also run the platform for you, with its analysts and Exabots working 24/7, which puts that option in the MDR model.
Who carries each stage in Exaforce?
- Your analysts
- Rules you write
- AI agent
- Provider's analysts
- Shared
- Not described
- Respond: Exabots act behind approval gates and Slack confirmations.
Source: Exaforce Exabot Respond · Read 13 Oct 2026
- Nights and weekends: Optional: Exaforce's analysts and Exabots run it 24/7.
Source: Exaforce homepage · Read 13 Oct 2026
Compared with the AI SOC analyst model as a whole, Exaforce differs on: Tune and Nights and weekends.
What does Exaforce document?
| Capability | Status |
|---|---|
| Runs response actions itself | Documented |
| Approval or sign-off before actions | Documented |
| Can act alone on some cases | Documented |
| Translates existing SOAR playbooks | Not described |
| Optional service where the vendor's people work the queue | Documented |
| Multi-tenant or MSSP offering | Not described |
| On-premises, hybrid or your own cloud tenant | Not described |
| Single-tenant option | Not described |
| Data residency option | Not described |
| Integration count published | Documented |
| Pricing unit or tiers published | Not described |
Documented: 5 of 11. Not described: translating existing SOAR playbooks, a multi-tenant or MSSP offering, on-premises, hybrid or customer-tenant hosting, a single-tenant option, a data residency option and a published pricing unit or tiers.
What are Exaforce's strengths?
Strengths
- Native response across endpoint, identity, cloud, SaaS and email, behind approval gates.
- A choice of running it yourself or having Exaforce run it, on the same platform.
What are Exaforce's limits?
Limits
- Deployment, tenancy and residency options are not described on the pages reviewed.
- The only public price is a marketplace starter pack whose unit is not defined.
What does Exaforce say about its own results?
Key facts
| Fact | Detail |
|---|---|
| Data layer | Unified data layer and real-time knowledge graph; Exaforce says it ingests logs, alerts and telemetry from over 100 sources. Source: Exaforce homepage · Read 13 Oct 2026 |
| Multi-model AI | Separate models for data relationships, anomaly detection and expert reasoning. Source: Exaforce homepage · Read 13 Oct 2026 |
| Response | Isolate cloud instances, quarantine or delete emails, block IPs, disable endpoints, reset MFA or passwords, suspend users, revoke sessions, across Okta, Entra ID, AWS and email. Source: Exaforce Exabot Respond · Read 13 Oct 2026 |
| Guardrails | Approval gates, full audit trails and Slack confirmations from users or managers. Source: Exaforce Exabot Respond · Read 13 Oct 2026 |
| Position on SOAR | "Go beyond rigid SOAR playbooks": out-of-the-box playbooks plus new ones built in natural language, in a visual editor mixing deterministic and agentic steps. Source: Exaforce Exabot Respond · Read 13 Oct 2026 |
| SIEM and MDR | Stores raw data and normalises it, which Exaforce calls a more efficient SIEM; listed use cases include SIEM replacement and replacing legacy MDR or MSSP. Source: Exaforce homepage · Read 13 Oct 2026 |
Integrations, deployment, pricing, compliance and funding
- Integrations
- 130+ across IaaS, SaaS, identity, endpoint, SIEM, SOAR, email, ticketing, threat intel and AI.
- Deployment
- Not published
- Pricing
- Not publishedNo pricing page. AWS Marketplace lists an Agentic SOC Starter Pack at $75,000 per 12-month contract; the unit is not defined.
Source: AWS Marketplace: Exaforce Agentic SOC Starter Pack · Read 13 Oct 2026
- Compliance
- Not reviewed
- Funding
- $75M Series A (April 2025) and $125M Series B (May 2026), per Exaforce's newsroom.
Source: Exaforce newsroom · Read 13 Oct 2026
If Exaforce is not the fit, which vendors document what it does not?
| Capability | Documented by |
|---|---|
| Translates existing SOAR playbooks | Mate Security |
| Multi-tenant or MSSP offering | Conifers CognitiveSOC and Dropzone AI |
| On-premises, hybrid or your own cloud tenant | Conifers CognitiveSOC, Cortex XSOAR, Splunk SOAR and Tines |
| Single-tenant option | Dropzone AI and Prophet Security |
| Data residency option | Conifers CognitiveSOC and Dropzone AI |
| Pricing unit or tiers published | Dropzone AI, Intezer and Tines |
How does Exaforce compare head to head?
Dispatches that mention Exaforce
Asked often about this page
What does Exaforce cost?
Not published. No pricing page. AWS Marketplace lists an Agentic SOC Starter Pack at $75,000 per 12-month contract; the unit is not defined.
Does Exaforce replace SOAR?
Exaforce runs response itself and does not require a SOAR. Existing playbooks are rebuilt or retired rather than translated, on the pages reviewed.
Does Exaforce offer a managed service?
Yes, as an option. Exaforce can also run the platform for you, with its analysts and Exabots working 24/7, which puts that option in the MDR model.
Sources for this profile
Source: Exaforce homepage · Read 13 Oct 2026
Source: Exaforce integrations · Read 13 Oct 2026
Source: Exaforce Exabot Respond · Read 13 Oct 2026
Source: Exaforce newsroom · Read 13 Oct 2026
Source: AWS Marketplace: Exaforce Agentic SOC Starter Pack · Read 13 Oct 2026