NEWS · UPDATED MONTHLY
AI SOC and SOAR news, 2026
Cyber AI Comparison team · Last checked September 2026 · Editorial assessment
What to know
Dated summaries of public announcements from the AI SOC platforms we cover and from standards bodies, newest first. Each item links to the original source. Vendor claims are reported as the vendor's.
Summaries of public announcements, with links to the original source. Updated monthly.
Mate Security introduces Gamebooks as an alternative to SOAR playbooks
Mate describes Gamebooks as "deterministic about intent, dynamic about execution", with agents choosing how to run each step inside fixed boundaries. Mate says one customer moved 711 playbooks into 10 Gamebooks.
Source: Mate Security blog
NIST drafts a quick-start guide on using AI for CSF 2.0 reporting
NIST published the initial public draft of SP 1353, a guide with AI prompts and use cases for analysing and reporting on Cybersecurity Framework 2.0 outcomes. Comments are due 15 October 2026.
Source: NIST CSRC
Mate Security completes its Series A
Mate says Insight Partners and Team8 continued as investors and Canaan Partners and M12 joined. Mate's newsroom lists the round at $35M.
Source: Mate Security blog
Prophet Security launches an AI Detection Engineer
The agent maps a team's detections and investigations to MITRE ATT&CK, then writes, tunes and backtests rules for SIEMs including Splunk, Sumo Logic and Microsoft Sentinel. It is available to Prophet AI SOC Analyst customers.
Source: Prophet Security blog
Dropzone AI makes AI Threat Hunter generally available
The agent runs hypothesis-driven hunts from 270+ prebuilt hunt packs mapped to MITRE ATT&CK, across Splunk, Microsoft Sentinel, CrowdStrike NG-SIEM, Elastic and Panther.
Source: Dropzone AI
Torq adds SOC Brain, a learning layer for its AI SOC Platform
SOC Brain's three parts, Recall, Reflex and Retrospect, learn from past investigations and analyst verdicts. Torq says each customer gets a private model trained only on its own data.
Source: Torq
7AI launches Federated SIEM and 7AI Build
Federated SIEM queries data where it already lives, in SIEMs, data lakes and cloud platforms; 7AI Build lets customers and partners create their own agentic workflows and skills.
Source: 7AI
Conifers opens a Singapore data region
CognitiveSOC now runs in Singapore as well as North America and Europe, with AI inference and data processing kept in-country on Azure.
Source: Conifers
Dropzone AI co-founds the AI Proving Grounds Consortium
Corelight, Dropzone AI, SCYTHE, SimSpace and Sondera launched a consortium to test AI defences and agentic workflows in realistic environments before they reach production.
Source: Dropzone AI
Conifers extends CognitiveSOC to an end-to-end agentic SOC
The release adds agents for threat intelligence, threat hunting, detection engineering, investigation and remediation within set limits. Conifers says onboarding takes 2–4 hours.
Source: Conifers
Torq acquires Jit
Torq bought Boston-based Jit to add AI context graphs to the Torq AI SOC Platform. Torq's release does not state the price.
Source: Torq
Torq launches Agentic Builder
Agentic Builder turns a plain-language description into an agent or workflow, tests it against real data and monitors it in production.
Source: Torq
Mate Security introduces the Security Context Graph
Mate describes it as "a graph of memories, capturing SOC knowledge just like an experienced analyst sees it", giving agents the operational context behind an alert.
Source: Mate Security blog
Torq raises a $140M Series D at a $1.2B valuation
Merlin Ventures led the round, with existing investors including Evolution Equity Partners, Notable Capital, Bessemer Venture Partners, Insight Partners and Greenfield Partners.
Source: Torq