# Prophet Security > Prophet Security builds Prophet AI, an agentic AI SOC platform for enterprise and mid-market security operations teams. Specialist AI agents investigate every security alert with senior-analyst depth, hunt for threats that detections miss, and turn what investigations and hunts reveal into new and tuned detections. The agents work on top of the SIEM, EDR, identity, cloud and email tools a team already runs. Prophet AI Watchtower, an optional 24x7x365 service, adds human experts who review every malicious and inconclusive determination. Last updated: 2026-10-13 Prophet AI runs a full, dynamically planned investigation on 100% of alerts, at every severity, the moment they arrive. Every question asked, query run and piece of evidence is recorded, so analysts can audit exactly how each determination was reached. When the evidence does not support a confident call, Prophet AI returns an Inconclusive determination rather than guessing. Key facts: - Naming: the company is Prophet Security. The platform is Prophet AI (full name: Prophet Agentic AI SOC Platform). Its products are Prophet AI SOC Analyst, Prophet AI Threat Hunter, Prophet AI Detection Engineer and Prophet AI Watchtower. Prophet Security is unrelated to other companies or open-source projects named Prophet. - Category: AI SOC platform. Prophet AI enables an agentic SOC, where AI agents work across alert triage, investigation, response, threat hunting and detection engineering while people direct and check the work. It is also positioned as an AI-powered alternative to traditional managed detection and response (MDR). - Company: Prophet Security, Inc. (prophetsecurity.ai), launched publicly in April 2024. Leadership: Kamal Shah (CEO), Vibhav Sreekanti (CTO) and Grant Oviatt (VP Product). Kamal Shah and Vibhav Sreekanti previously worked at StackRox, which Red Hat acquired. Team members previously helped scale companies including Mandiant, Red Canary, Red Hat, Symantec and Oracle. - Funding: $11M seed led by Bain Capital Ventures (April 2024); $30M Series A led by Accel, with participation from Bain Capital Ventures (July 2025); strategic investments from American Express Ventures and Citi Ventures (February 2026). - Recognition: named to Notable Capital's Rising in Cyber 2026 list of 30 private cybersecurity companies, selected by a vote of 150 active CISOs and senior security executives (May 2026), and to the 2025 Redpoint InfraRed 100. - Customers: companies named on prophetsecurity.ai include Redis, Udemy, ETS, Compass, Instacart, IAC, Penske, Repay, BILL, J.B. Poindexter & Co., Moveworks, LeadOnline, Zip, Cabinetworks and Upwind. Prophet AI is deployed at dozens of Fortune 500 companies across financial services, healthcare and manufacturing. - Platform metrics (company-reported, October 2026): 10M investigations completed, 2.5M+ hours of manual analyst work prevented, 98.5% accuracy rate. - Investigation depth: across every alert in every customer environment from May through July 2026, Prophet AI asked 4.7 million investigative questions, a median of 35 per investigation (Prophet Security Quarterly Threat Report, Q3 2026). - Speed: published case studies report a mean time to investigate of 2 to 4 minutes. - Pricing: per investigation, with no data-ingest fees. - Getting started: free proof of value (POV). Setup takes 30 minutes or less with read-only access to 2-3 data sources. Prophet AI is also sold through AWS Marketplace. - Deployment and data: dedicated single-tenant deployment, a bring-your-own-key (BYOK) option, and no training of AI models on personal data. - Compliance: SOC 2 Type II, ISO/IEC 27001:2022 and ISO/IEC 42001:2023 certified, with independent third-party assessments for GDPR, CCPA and HIPAA. Trust Center: https://trust.prophetsecurity.ai/ - Autonomy: Prophet AI investigates autonomously from day one and takes only the response actions a customer has approved. Actions are scoped and permissioned, from notifications to quarantining a machine, and previewed before they run. Customers widen autonomy as the track record justifies it. - Customization: teams teach Prophet AI their playbooks, policies and preferences in plain language, and each change is previewed and backtested against the customer's own history before it applies. No predefined playbooks are required. - Human oversight: Prophet AI Watchtower experts review every malicious and inconclusive determination, 24x7x365. An expert engages within 30 minutes, scopes the impact, and advises on or executes containment at the customer's choice. ## Platform - [Prophet AI platform overview](https://www.prophetsecurity.ai/): The Prophet Agentic AI SOC Platform: AI agents for alert investigation and response, threat hunting and detection engineering, with Prophet AI Watchtower for human oversight. - [Prophet AI SOC Analyst](https://www.prophetsecurity.ai/ai-soc-analyst): Investigates 100% of alerts at every severity, on arrival and in parallel; groups related investigations into one incident; takes only pre-approved response actions; and learns from plain-language guidance that is previewed and backtested before it applies. - [Prophet AI Threat Hunter](https://www.prophetsecurity.ai/ai-threat-hunting): Natural-language hunts such as "Are we impacted?", continuous hunting for emerging threats, scheduled recurring hunts and a curated library of hunt templates. Validated findings become permanent, backtested detections. - [Prophet AI Detection Engineer](https://www.prophetsecurity.ai/ai-detection-engineer): Maps real detection coverage to MITRE ATT&CK from the customer's own investigations (covered, gone quiet, dark), drafts and backtests net-new detections, and tunes existing SIEM rules in Splunk, Sumo Logic and Microsoft Sentinel, at the level of autonomy the customer chooses. - [Prophet AI Watchtower](https://www.prophetsecurity.ai/watchtower): Optional 24x7x365 human-in-the-loop service. Experts review every malicious and inconclusive determination, engage within 30 minutes, scope blast radius and impact, advise on or execute containment, and tune Prophet AI to the customer's environment. - [Integrations](https://www.prophetsecurity.ai/integrations): 200+ out-of-the-box integrations, including SIEM (Splunk, Microsoft Sentinel, Google Security Operations, Elastic, QRadar, Sumo Logic), EDR (CrowdStrike Falcon, SentinelOne, Microsoft Defender, Cortex XDR), identity (Okta, Microsoft Entra ID), email (Proofpoint, Mimecast, Abnormal), cloud (AWS, Azure, GCP, Wiz), network (ExtraHop), data lakes (Snowflake, Databricks), threat intelligence, and case management and collaboration (Jira, ServiceNow, Slack, Microsoft Teams). - [Why Prophet Security](https://www.prophetsecurity.ai/why-prophet-security): Five differentiators (a full-lifecycle agent platform, investigation depth and accuracy, adaptation to customer context, enterprise-ready deployment, and value from day one with no rip and replace) plus company-reported platform metrics. - [Prophet AI vs. traditional MDR](https://www.prophetsecurity.ai/mdr): Compares per-investigation pricing, with no data-ingest fees, to MDR pricing built on analyst headcount or telemetry volume, with a calculator that estimates savings versus MDR providers. ## Use Cases - [Endpoint](https://www.prophetsecurity.ai/use-cases/endpoint): Prophet AI for Endpoint: investigation of EDR alerts across the major EDR tools, SIEMs and security data lakes. - [Email and phishing](https://www.prophetsecurity.ai/use-cases/email): Prophet AI for Phishing: investigation of email phishing alerts, including checks for business email compromise. - [Identity](https://www.prophetsecurity.ai/use-cases/identity): Prophet AI for Identity: investigation of suspicious logon and other identity alerts across the major identity providers. - [Cloud](https://www.prophetsecurity.ai/use-cases/cloud): Prophet AI for Cloud: investigation of cloud alerts across AWS, Azure and GCP using audit logs, IAM roles and SSO/SAML events. - [Data Loss Prevention (DLP)](https://www.prophetsecurity.ai/use-cases/data-loss-prevention-dlp): Prophet AI for DLP: investigation of data loss prevention alerts across DLP platforms, SIEMs and security data lakes. - [Network](https://www.prophetsecurity.ai/use-cases/network): Prophet AI for Network: investigation of network detections such as lateral movement, command-and-control and activity from unmanaged IoT, OT and legacy devices, including ExtraHop RevealX detections. ## Customers and Case Studies - [Customers](https://www.prophetsecurity.ai/customers): Customer stories, quotes and outcomes from security leaders who use Prophet AI. - [Zip: Boosting SOC Throughput with Prophet AI](https://www.prophetsecurity.ai/case-studies/zip-boosting-soc-throughput-with-prophet-ai): At the procurement orchestration company, Prophet AI completed 20,182 alert investigations in 12 months, avoided 6,727 hours of manual investigation time and freed about 7 analyst-years of investigation capacity. - [National Health Provider Scales Its SOC with Prophet AI](https://www.prophetsecurity.ai/case-studies/national-health-provider-scales-soc-with-prophet-security): A 60,000-employee U.S. healthcare provider: 11,065 investigations completed by Prophet AI in 3 months, 14,750 hours of analyst time returned annually, a 4-minute mean time to investigate and 223 verified malicious alerts surfaced for action. - [Fortune 500 Retail and Logistics: Investigating Every Alert at Scale, 24/7](https://www.prophetsecurity.ai/case-studies/fortune-500-retail-and-logistics-investigating-every-alert-at-scale-24-7-with-prophet-ai): About 7,500 investigations completed by Prophet AI each year, 90% of after-hours alerts handled on arrival (70% of all alerts land after hours) and about 2,500 hours of manual investigation time avoided annually. - [J.B. Poindexter & Co.: SOC Capacity and Speed with Prophet AI](https://www.prophetsecurity.ai/case-studies/jb-poindexter-co-unlocking-soc-capacity-and-speed-with-prophet-ai): A diversified manufacturer with 8,500+ employees: under 4 minutes mean time to investigate, 1,469 hours of manual investigation time avoided in 2 months and about 6.3 analyst-years of investigation capacity freed annually. - [Cabinetworks: SOC Efficiency with Prophet AI](https://www.prophetsecurity.ai/case-studies/cabinetworks-revolutionizing-soc-efficiency-with-prophet-ai): One of the largest private cabinet makers in the U.S.: a 10x increase in SOC throughput, over 7x ROI and more than 1,250 hours of investigation toil saved in the first 5 months. - [Scaling Security Investigations for a Cloud-First Team](https://www.prophetsecurity.ai/case-studies/scaling-security-investigations-for-a-cloud-first-team-with-prophet-ai): A multi-billion-dollar real estate technology company: a 2-minute mean time to investigate, a 95% reduction in investigation time versus the manual baseline and 91.9% of investigations completed with no analyst involvement. - [Prophet AI on Gartner Peer Insights](https://www.gartner.com/reviews/market/it-security/vendor/prophet-security): Independent customer reviews of Prophet AI. ## Original Research and Reports - [State of AI in the SOC 2026: 8 Key Takeaways](https://www.prophetsecurity.ai/blog/state-of-ai-in-the-soc-2026): Findings from Prophet Security's second annual survey of 250 security leaders and practitioners. 40% run AI in their SOC and 56% are evaluating or piloting it; the average organization leaves about 28% of alerts uninvestigated; a thorough investigation averages about 75 minutes; 72% of AI users cut investigation time by 25% or more; and 46% of in-house AI builds were scrapped, replaced or never reached production. - [State of AI in Security Operations 2026 (full report)](https://resources.prophetsecurity.ai/state-of-ai-in-security-operations): The full 2026 survey report, with alert volumes and investigation timelines by segment, build-versus-buy results, validation and autonomy practice, hunting frequency and methodology. Gated download. - [Q3 2026 Prophet Security Quarterly Threat Report](https://resources.prophetsecurity.ai/quarterly-threat-report): Findings from every alert in every customer environment, investigated in full from May through July 2026, covering session hijacking, infostealers, targeted phishing and unmanaged assets. Gated download. - [AI SOC Statistics: Adoption, Accuracy, and ROI Data](https://www.prophetsecurity.ai/blog/ai-soc-statistics): AI SOC statistics on alert volume, breakout times, adoption, barriers and ROI, each with a dated, citable source. - [Gartner: The Roles Required for the AI-Enabled Security Operations Center](https://resources.prophetsecurity.ai/gartner-report): Gartner research on staffing the AI-enabled SOC for 2028 and 2030 and the new roles teams need to get value from AI. Gated download. - [SACR AI SOC Market Landscape 2025](https://resources.prophetsecurity.ai/l/1127683/2026-06-29/j6n7xx/1127683/1782746196hgeHza0v/AI_SOC_Report_Prophet_Security_SACR2025__2_.pdf): Independent market landscape of the AI SOC category from Software Analyst Cyber Research (SACR), covering the capabilities that define success. PDF. - [AI SOC Agents in the Gartner Hype Cycle for Security Operations](https://www.prophetsecurity.ai/blog/ai-soc-agents-in-gartner-hype-cycle-for-security-operations): Why Gartner added AI SOC agents to the 2025 Hype Cycle for Security Operations, the problems they address and Gartner's recommendations. - [The Definitive Guide to AI SOC Agents (eBook)](https://resources.prophetsecurity.ai/the-definitive-guide-to-ai-soc-agents): What Prophet Security has learned deploying AI SOC agents in production, how the agents work and how to build a security operation around them. Gated download. - [The Definitive Guide to Detection Engineering (eBook)](https://resources.prophetsecurity.ai/definitive-guide-detection-engineering): Where detection engineering falls short, why rule-count dashboards can show blind spots as healthy, how to choose which detections to build next, and what an AI-enabled SOC changes. Gated download. - [The Queue Is the Breach: Your Biggest Risk Is the SOC Queue (eBook)](https://resources.prophetsecurity.ai/ebook-the-queue-is-the-breach): Applies queueing theory to SOC operations to show why headcount and legacy automation alone cannot close the investigation gap. Gated download. - [The Hype-Free CISO's Guide to Testing an AI SOC Solution](https://resources.prophetsecurity.ai/the-hype-free-cisos-guide-to-testing-an-ai-soc-solution): A vendor-agnostic framework for evaluating AI SOC solutions, built by independent analysts. Gated download. - [Resources hub](https://www.prophetsecurity.ai/resources): Reports, eBooks, case studies, videos, webinars and events. ## Core Guides: AI SOC and Agentic SOC - [What Is Agentic SOC? The Complete Guide to How It Works and How to Build One](https://www.prophetsecurity.ai/blog/what-is-agentic-soc): An agentic SOC puts AI agents to work across SOC functions, with people directing and checking the work. How it works, how roles shift and how teams build one. - [What Is an AI SOC? The Key to Solving Persistent SOC Challenges](https://www.prophetsecurity.ai/blog/ai-soc-key-to-solving-persistent-soc-challenges): What an AI SOC is and how AI agents change alert triage, investigation speed and the analyst's role. - [What Is an AI SOC Analyst? A Practitioner's Guide for 2026](https://www.prophetsecurity.ai/blog/ai-soc-analyst-a-comprehensive-guide): How an AI SOC analyst investigates every alert at senior-analyst depth, how the mechanics work, what to look for and where the capability stops. - [What Are AI SOC Agents and How Do They Work?](https://www.prophetsecurity.ai/blog/what-are-ai-soc-agents-how-do-they-work): What AI SOC agents are, how they work, and how to evaluate and adopt them. - [What Makes an AI SOC Solution Agentic?](https://www.prophetsecurity.ai/blog/what-makes-an-ai-soc-solution-agentic): Four traits that separate agentic AI SOC solutions, which investigate alerts autonomously and adapt in real time, from earlier automation tools. - [What Is an AI Detection Engineer? A Practitioner's Guide for 2026](https://www.prophetsecurity.ai/blog/what-is-an-ai-detection-engineer): What an AI detection engineer is, the five kinds of work it does, and what changes for the team accountable for detection coverage. - [What Is AI Threat Hunting and How Does It Work?](https://www.prophetsecurity.ai/blog/threat-hunting-with-ai): What an AI threat hunter does, which hunts run and why, and what changes for a team that hunts continuously. - [What Is Agentic Security?](https://www.prophetsecurity.ai/blog/what-is-agentic-security-everything-you-should-know): How AI agents investigate and make decisions the way a human analyst would, faster and at scale, and what that means for security operations. - [What Is an Autonomous SOC, and Can You Build One Today?](https://www.prophetsecurity.ai/blog/what-is-an-autonomous-soc-can-you-build-one-today): What AI can automate in the SOC today, what still needs humans, and how to evaluate autonomous SOC tools. - [AI SOC Architecture: Integrating with SIEM, SOAR, Case Management and More](https://www.prophetsecurity.ai/blog/ai-soc-architecture-integrating-with-siem-soar-case-management-and-more): How an agentic AI SOC fits into an existing stack of SIEM, SOAR, ITSM and native detection tools. - [The Human-AI SOC: A Practical Guide to Hybrid Workflows](https://www.prophetsecurity.ai/blog/the-human-ai-soc-a-practical-guide-to-hybrid-workflows): How the Tier 1 role shifts toward reviewing investigations once AI handles rote data collection. - [How to Build Trust in an AI SOC: A Practical Framework](https://www.prophetsecurity.ai/blog/how-to-build-trust-in-an-ai-soc-a-practical-framework): A framework for transparency, control, coverage, performance metrics and governance. - [Why Explainability of AI SOC Analyst Platforms Is Important](https://www.prophetsecurity.ai/blog/why-explainability-of-ai-soc-analyst-platforms-is-important): What an explainable AI SOC analyst records: the data reviewed, the questions asked and the evidence behind each conclusion. - [Will AI Replace the SOC Team? What Gartner Says About AI-Enabled SOC Roles](https://www.prophetsecurity.ai/blog/will-ai-replace-soc-teams): Gartner says the SOC will not shrink by 2030. How AI-enabled roles shift for analysts, engineers and exposure work. - [Why Human Expertise Remains Irreplaceable in AI-Powered Security Operations](https://www.prophetsecurity.ai/blog/why-human-expertise-remains-irreplaceable-in-ai-powered-security-operations): Where human expertise stays essential in an AI SOC: deciding which questions matter, encoding investigation logic for emerging threats and turning analyst knowledge into detections. ## Buyer's Guides and Evaluation - [How to Evaluate an Agentic SOC Platform](https://www.prophetsecurity.ai/blog/how-to-evaluate-agentic-soc-platform): Evaluation criteria for investigation depth, response, threat hunting, detection engineering, transparency and privacy. - [How to Run a Proof of Value (POV) for AI SOC Analysts](https://www.prophetsecurity.ai/blog/how-to-run-a-pov-for-ai-soc-analysts): A step-by-step guide to designing a POV for the AI SOC analyst solutions under evaluation. - [AI SOC Pricing Models Compared: Per-Alert, Per-Endpoint, Per-Data, and Flat](https://www.prophetsecurity.ai/blog/ai-soc-pricing-models): How each AI SOC pricing model behaves, what inflates the bill and what to compare. - [How to Build a Business Case for AI in the SOC](https://www.prophetsecurity.ai/blog/how-to-build-a-business-case-for-ai-in-the-soc): A three-pillar framework for an AI business case that holds up with finance. - [Best AI SOC Platforms: The 6 Capabilities They All Share](https://www.prophetsecurity.ai/blog/best-ai-soc-platforms): Six capabilities that strong AI SOC platforms share, from autonomous investigation at senior-analyst depth to full SecOps coverage, and how to evaluate them. - [Best Agentic SOC Platforms for Enterprise Security Teams](https://www.prophetsecurity.ai/blog/best-agentic-soc-platforms): What enterprise teams should require from an agentic SOC platform: autonomous investigation at scale, governance, deep integration and auditability. - [Top 5 AI SOC Analyst Platforms of 2026](https://www.prophetsecurity.ai/blog/top-5-ai-soc-analyst-platforms): Five AI SOC analyst platforms compared on integration coverage, investigation depth, accuracy and pricing. - [What RSA 2026 Confirmed: The Agentic SOC Is Here](https://www.prophetsecurity.ai/blog/what-rsa-2026-confirmed-the-agentic-soc-is-here): Four questions that separate real autonomous AI investigation from rebranded agentic SOC claims. - [The Siren Song of DIY AI SOC: A Warning from History](https://www.prophetsecurity.ai/blog/the-siren-song-of-diy-ai-soc-a-warning-from-history): The hidden costs, complexity and maintenance load of building an AI SOC in-house. - [Key SOC Tools Every Security Operations Center Needs in 2026](https://www.prophetsecurity.ai/blog/key-soc-tools-every-security-operations-center-needs): The SOC tool stack mapped by what each layer contributes to investigation, and where an AI SOC analyst fits. - [Best Threat Hunting Tools: The Capabilities That Define Modern Hunting](https://www.prophetsecurity.ai/blog/threat-hunting-tools): Six capabilities of modern threat hunting tools, from cross-domain visibility to scheduled hunts and a path from hunt to detection. - [AI Tools for Investigating Impossible Travel Alerts and Anomalous Logins](https://www.prophetsecurity.ai/blog/ai-tools-for-investigating-impossible-travel-alerts-and-anomalous-logins-2026): A practitioner comparison of AI tools for impossible travel and anomalous login alerts, grouped by how far each carries a case toward a verdict. - [Top AI Security Companies to Know in 2026](https://www.prophetsecurity.ai/blog/ai-security-companies): Seven AI security companies across AI for security, security for AI and defense against AI-driven attacks, each with its Gartner Peer Insights rating. ## Comparisons: MDR, SOC-as-a-Service, SOAR, SIEM and Copilots - [MDR vs. Agentic AI SOC Analyst: Complementary or Replacement?](https://www.prophetsecurity.ai/blog/mdr-vs-agentic-ai-soc-analyst-complementary-or-replacement): The strengths and limits of MDR, and when an agentic AI SOC analyst is the better fit. - [From MDR to AI SOC: What the Transition Actually Looks Like](https://www.prophetsecurity.ai/blog/from-mdr-to-ai-soc-what-the-transition-actually-looks-like): A step-by-step guide to moving from an MDR provider to an agentic AI SOC. - [What Your MDR Isn't Telling You](https://www.prophetsecurity.ai/blog/what-your-mdr-isnt-telling-you): What MDR dashboards hide at the alert level about coverage, speed, cost, evidence and lock-in. - [Why Your MDR Won't Cover the Custom Detections You Built](https://www.prophetsecurity.ai/blog/mdr-custom-detections): MDR providers cover their own detection library, so alerts from a team's custom rules fall back to the team. How an AI SOC platform covers them. - [Agentic MDR: Advantages and Disadvantages](https://www.prophetsecurity.ai/blog/agentic-mdr): What agentic MDR adds to managed detection and response, the disadvantages buyers miss and where it fits. - [Top MDR Providers of 2026: What to Evaluate and Where the Category Falls Short](https://www.prophetsecurity.ai/blog/top-mdr-providers-of-2026-what-to-evaluate-and-where-the-category-falls-short): MDR providers compared on what they investigate, how they handle custom detections and where the shared-analyst model hits its limits. - [SOC-as-a-Service in 2026: What It Is, What It Costs, and Whether AI Changes the Math](https://www.prophetsecurity.ai/blog/what-is-soc-as-a-service-socaas-and-does-it-still-make-sense-in-the-age-of-ai): What SOC-as-a-Service (SOCaaS) is, what it costs and how agentic AI changes the economics. - [What Is a Managed SOC? How It Compares to AI SOC Analysts](https://www.prophetsecurity.ai/blog/what-is-a-managed-soc-how-it-compares-to-ai-soc-analysts): How an outsourced managed SOC compares with AI SOC analysts. - [Top SOC-as-a-Service Providers for 2026](https://www.prophetsecurity.ai/blog/top-soc-as-a-service-providers): A SOCaaS buyer's guide comparing MDR providers and AI SOC platforms on investigation depth, custom detections and transparency. - [SOAR vs. AI SOC: Which Actually Reduces Your Response Time (and Risk)?](https://www.prophetsecurity.ai/blog/soar-vs-ai-soc): What SOAR compresses, what it cannot touch, and why MTTR belongs next to alert coverage. - [SIEM vs. AI SOC: Solving the Alert Triage Bottleneck](https://www.prophetsecurity.ai/blog/siem-vs-ai-soc-solving-the-alert-triage-bottleneck): Why separating detection and retention (the SIEM) from triage and investigation (the AI SOC) gives analysts data the SIEM was never scoped to hold. - [Agentic AI vs. Security Copilot: Which Approach Powers Your SOC?](https://www.prophetsecurity.ai/blog/agentic-ai-vs-security-copilot-which-approach-powers-your-soc): How agentic AI, which starts and runs investigations on its own, differs from a security copilot, which waits for analyst prompts. - [Top 6 SOAR Platforms of 2026](https://www.prophetsecurity.ai/blog/top-6-soar-platforms-of-2026): Six SOAR platforms ranked, and how to look beyond legacy SOAR to agentic AI. ## Investigation Guides - [Alert Triage: A Complete Guide for Security Operations Teams](https://www.prophetsecurity.ai/blog/alert-triage): What alert triage is, the step-by-step process, common challenges, key metrics and how AI-driven triage changes the operating model. - [Phishing Investigation: A Practical Guide for SOC Analysts](https://www.prophetsecurity.ai/blog/phishing-investigation): A workflow to confirm phishing, collect evidence, scope exposure and remediate across email, BEC and impersonation. - [Email Phishing Investigation 101: Best Practices](https://www.prophetsecurity.ai/blog/email-phishing-investigation-101-best-practices): How SOC leaders build a reliable phishing investigation process that cuts backlog and investigation time. - [Investigating Business Email Compromise (BEC): A Practical Approach](https://www.prophetsecurity.ai/blog/investigating-business-email-compromise-bec-a-practical-approach): Detecting and investigating BEC with email headers, authentication logs and behavioral signals. - [How to Investigate an Okta Security Alert](https://www.prophetsecurity.ai/blog/how-to-investigate-an-okta-security-alert): A step-by-step guide to separating true account compromise from false positives in Okta alerts. - [How to Investigate EDR Alerts: Triage and Response](https://www.prophetsecurity.ai/blog/how-to-investigate-edr-alerts-triage-and-response): Step-by-step triage, investigation and response for EDR alerts spanning files, processes and network activity. - [How to Investigate Impossible Travel Alerts and Cut False Positives](https://www.prophetsecurity.ai/blog/investigating-geo-impossible-travel-alerts): A triage workflow for VPNs, MFA and sessions, plus the policies that cut impossible travel alert volume. - [Credential Stuffing Attacks: A SOC Playbook for Investigation and Response](https://www.prophetsecurity.ai/blog/credential-stuffing-investigation): How to find a successful credential stuffing attack inside high-volume authentication noise. - [How an MFA Fatigue Attack Works and How to Fight Back](https://www.prophetsecurity.ai/blog/what-is-mfa-fatigue-attack-mfa-bombing-best-practices): How MFA bombing works, how to detect it and how to prevent it. - [Kerberoasting: Detection and Investigation in Active Directory](https://www.prophetsecurity.ai/blog/kerberoasting-detection-in-active-directory): Detecting Kerberoasting from domain controller event 4769, why the RC4 signal is fading, three detections that replace it and how to investigate. - [Web Shell Detection and Investigation](https://www.prophetsecurity.ai/blog/web-shell-detection): How to detect a web shell, confirm one without guessing, and hunt for web shells that never fired an alert. - [99 False Positives and 1 Stolen Session: Why SOCs Need Investigation Depth](https://www.prophetsecurity.ai/blog/99-false-positives-and-1-stolen-session-why-socs-need-investigation-depth-not-more-detection): Suspicious login alerts are the noisiest signal in most SOCs and the only place session hijacking is visible. What most teams miss. - [Why Most DLP Alerts Go Uninvestigated](https://www.prophetsecurity.ai/blog/why-most-dlp-alerts-go-uninvestigated): Why most organizations cannot afford to investigate their DLP detections, and how AI helps analysts work them. ## Detection Engineering and Threat Hunting - [Detection Engineering in an AI-Driven SOC: What Actually Needs to Change](https://www.prophetsecurity.ai/blog/detection-engineering-in-an-ai-driven-soc-what-actually-needs-to-change): How the detection lifecycle, metadata and tuning model change once AI SOC analysts investigate every alert. - ["Just Tune Your Detections" Misses What's Actually Changing](https://www.prophetsecurity.ai/blog/just-tune-your-detections-misses-whats-changing): What shifts in detection architecture when detection and investigation collapse into one automated process. - [Proactive Threat Hunting: Why Programs Stall and What Directed Hunting Changes](https://www.prophetsecurity.ai/blog/proactive-threat-hunting-why-programs-stall-and-what-directed-hunting-changes): Most hunting programs stall at choosing what to hunt. Why hypothesis quality outweighs search speed, and what changes when detection engineering and hunting share one feedback loop. - [Cyber Hunting: A Practitioner Guide to Proactive Threat Hunting](https://www.prophetsecurity.ai/blog/cyber-hunting): How a practitioner scopes, runs and operationalizes a hypothesis-driven hunt. - [Actionable Threat Intelligence: Every Threat Report Ends One of Three Ways](https://www.prophetsecurity.ai/blog/actionable-threat-intelligence): Every threat report should end in a hunt, a detection or a confident decision to ignore it. How to get each report to one of the three. ## SOC Metrics and Operations - [SOC Metrics and KPIs That Matter in 2026: MTTR, MTTD, MTTI](https://www.prophetsecurity.ai/blog/soc-metrics-that-matter-mttr-mtti-false-negatives-and-more): Definitions, formulas and realistic benchmarks for MTTR, MTTD, MTTI and false negative rate, plus the metrics that mislead. - [SOC Tiers Explained: What Tier 1, 2, and 3 Analysts Do](https://www.prophetsecurity.ai/blog/soc-tiers-are-out-how-ai-is-flattening-soc-tier-1-2-3): What each SOC tier does, how AI changes each role and whether the tiered model still makes sense. - [Mean Time to Detect (MTTD): Definition, Formula, and Why the Metric Fails in Practice](https://www.prophetsecurity.ai/blog/redefining-mean-time-to-detect-mttd-in-ai-driven-socs): Why MTTD should measure the moment a threat is actively recognized, and how traditional measurement misleads. - [How to Measure MTTR in AI-Driven SOCs](https://www.prophetsecurity.ai/blog/how-to-measure-mttr-in-ai-driven-socs): How AI SOC analysts reduce MTTR by removing dwell time, speeding investigation and automating containment. - [MTTR Reduction Guide: Practical Steps to Sub-2-Minute Investigations](https://www.prophetsecurity.ai/blog/mttr-reduction-guide-practical-steps-to-sub-2-minute-investigations): The architectural changes that bring investigations under two minutes, starting with how context is assembled. - [5 Things to Measure in an AI-Driven SOC (That Didn't Exist Before)](https://www.prophetsecurity.ai/blog/5-things-to-measure-in-an-ai-driven-soc-that-didnt-exist-before): Five measurements that apply only once AI is doing real investigation work. - [SOC Capacity Modeling: How Many Alerts Can Your Team Really Handle?](https://www.prophetsecurity.ai/blog/soc-capacity-modeling-how-many-alerts-can-your-team-really-handle): The math of SOC capacity versus utilization, and how to reclaim time for threat hunting. - [Rethinking SOC Capacity: How AI Changes the Human Cost Curve](https://www.prophetsecurity.ai/blog/rethinking-soc-capacity-how-ai-changes-the-human-cost-curve): In-house, MDR and AI hybrid capacity models compared on cost and analyst toil. - [Removing Alert Wait Time in the SOC: Bypassing the Human Queue](https://www.prophetsecurity.ai/blog/removing-alert-wait-time-in-the-soc-bypassing-the-human-queue): Why risk sits in the 95th percentile of alert wait time, and how an AI SOC model removes the human queue. - [Alert Fatigue in Cybersecurity: Why Tuning Isn't Enough Anymore](https://www.prophetsecurity.ai/blog/how-to-reduce-alert-fatigue-in-cybersecurity-best-practices): Alert fatigue as an investigation-capacity problem, and how SOC teams close the gap with metrics and AI triage. - [Alert Tuning Best Practices for Security Operations](https://www.prophetsecurity.ai/blog/security-operations-center-soc-best-practices-alert-tuning): Tuning practices that reduce low-quality false positives and improve detection accuracy. - [Beyond Alert Tuning](https://www.prophetsecurity.ai/blog/beyond-alert-tuning-how-ai-and-context-unlocks-scale): Why tuning alone cannot fix alert fatigue, and how AI agents investigate with human-level context. - [The SOC Hierarchy of Needs: A Maturity Model for Modern Operations](https://www.prophetsecurity.ai/blog/the-soc-hierarchy-of-needs-a-maturity-model-for-modern-operations): A maturity model for security operations, from alert management to posture improvement. - [Why Depth of Investigation Is the Holy Grail of AI SOC Accuracy](https://www.prophetsecurity.ai/blog/why-depth-of-investigation-is-the-holy-grail-of-ai-soc-accuracy): Why deep, contextual investigation, more than speed, determines accuracy in an AI-driven SOC. - [5 AI SOC Best Practices](https://www.prophetsecurity.ai/blog/5-ai-soc-best-practices): Five operational practices for an AI SOC that clear alert backlogs, enforce consistency and free detection engineers for higher-value work. - [Top SOC Challenges Facing Analysts and Managers](https://www.prophetsecurity.ai/blog/top-soc-challenges-facing-secops-analysts-and-managers): The different challenges SOC analysts and SOC managers face, from ransomware to skills shortages. ## SOC Automation and Response - [SOC Automation 2.0: The AI Evolution in Security Operations](https://www.prophetsecurity.ai/blog/demystifying-soc-automation): The benefits and limits of SOC automation, and how AI changes what can be automated. - [Automated Incident Response: Streamlining Your SecOps](https://www.prophetsecurity.ai/blog/automated-incident-response-streamlining-your-secops): Automating incident response from threat identification through eradication and remediation. - [Automated Remediation in the SOC: What to Automate, What to Keep Human](https://www.prophetsecurity.ai/blog/automated-remediation-what-to-automate-what-to-keep-human): A framework that weighs blast radius against detection confidence to decide which remediation to automate. - [Automated Remediation: Top 3 Scenarios for Auto-Remediation](https://www.prophetsecurity.ai/blog/top-3-scenarios-for-auto-remediation): Three scenarios where auto-remediation fits, weighed against the risks in production environments. - [Agentic SOAR: What Changes When the Decision Happens at Runtime](https://www.prophetsecurity.ai/blog/agentic-soar-runtime-decision): Why SOAR playbooks splinter into exceptions, and what changes when an agentic investigation decides on a response action at runtime. - [SOAR Playbooks: How They Work, Why They Break, and What's Replacing Them](https://www.prophetsecurity.ai/blog/soar-playbook-maintenance-problem): Why static SOAR playbooks decay as APIs, detections and tools change, and the maintenance cost most teams under-budget. - [Top SOAR Playbook Use Cases: What Teams Actually Automate](https://www.prophetsecurity.ai/blog/soar-playbook-use-cases): Which SOAR playbooks teams run in production, drawn from SANS survey data and years inside an MDR, and where the list stops. - [Why SOAR Implementations Fail (And How to Actually Use Them)](https://www.prophetsecurity.ai/blog/why-soar-implementations-fail): Why most SOAR implementations stall at five to ten playbooks, and where to point the SOAR a team already owns. ## Threat Research - [Citrix NetScaler Zero-Day: Detecting and Investigating CVE-2026-88771 and CVE-2026-88772](https://www.prophetsecurity.ai/blog/citrix-netscaler-zero-day): The Citrix NetScaler zero-days were exploited for weeks. How to hunt for unique web shells, deleted logs and stolen credentials. - [SharePoint Zero-Day Vulnerability: Detecting and Investigating CVE-2026-58644](https://www.prophetsecurity.ai/blog/sharepoint-zero-day-vulnerability): Prophet AI Threat Hunter ran a hunt for CVE-2026-58644 as it emerged. How to detect exploitation, investigate a suspected web shell and hunt retrospectively for compromise. - [ClickFix Attacks: How to Detect and Investigate Fake CAPTCHA Lures](https://www.prophetsecurity.ai/blog/clickfix-attack): The process ancestry, registry and macOS artifacts that outlive the fake CAPTCHA page that delivered a ClickFix attack. - [EtherHiding Malware on macOS: How Attackers Hide C2 on the Blockchain](https://www.prophetsecurity.ai/blog/etherhiding-malware-macos-blockchain-c2): A macOS implant that resolved its C2 from a Polygon smart contract, with on-chain reconstruction, IOCs, and Sigma and YARA detections. - [The Hugging Face Breach: Part Incident Report, Part Product Launch](https://www.prophetsecurity.ai/blog/hugging-face-breach): OpenAI's own models caused the Hugging Face breach. The tradecraft of the first agent-run intrusion and what it means for SOC teams. - [Facebook Phishing Email Campaign: How Attackers Weaponize Meta Business Manager Partner Requests](https://www.prophetsecurity.ai/blog/facebook-phishing-email-how-attackers-weaponize-meta-business-manager): A campaign that abuses Meta Business Manager partner requests to deliver credential-harvesting links through legitimate facebook.com infrastructure. - [Zoom Phishing Email: Unmasking a Novel TOAD Attack Hidden in Legitimate Infrastructure](https://www.prophetsecurity.ai/blog/when-zoom-phishes-you-unmasking-a-novel-toad-attack-hidden-in-legitimate-infrastructure): Prophet AI discovered a novel telephone-oriented attack delivery (TOAD) campaign that abuses Zoom's legitimate infrastructure and display names to bypass secure email gateways. - [The Mastra npm Supply Chain Attack: Hunting easy-day-js Before It Spreads](https://www.prophetsecurity.ai/blog/mastra-npm-supply-chain-attack-easy-day-js): How a targeted threat hunt turned JFrog's research on the Mastra npm compromise into a yes-or-no answer for one environment in under an hour. - [Supply Chain Alert: Malicious Axios Versions Published to npm](https://www.prophetsecurity.ai/blog/supply-chain-alert-malicious-axios-versions-published-to-npm): A compromised Axios maintainer account published malicious npm packages. IOCs, downgrade instructions and threat hunting guidance. - [Automated Investigation at Scale: How Prophet AI Protects High-Exposure Partner Environments](https://www.prophetsecurity.ai/blog/automated-investigation-at-scale-partner-environments): How Prophet AI investigated credential sprays, AiTM session hijacking and token persistence in a partner-heavy Microsoft 365 tenant. - [Prophet AI in Action: Unmasking "Zombie" Credentials in Subsidiary Infrastructure](https://www.prophetsecurity.ai/blog/prophet-ai-in-action-unmasking-zombie-credentials-in-subsidiary-infrastructure): How Prophet AI investigated an attack using a dormant AWS access key and automated response and remediation in minutes. ## Analysis: New AI Models and SecOps Tools - [What OpenAI Astra Means for Security Operations](https://www.prophetsecurity.ai/blog/openai-astra-security-operations): What GPT-6 Astra, the first model rated Critical for cyber capability, changes for SOC coverage and speed. - [What Claude Mythos Actually Means for Your Security Program](https://www.prophetsecurity.ai/blog/what-claude-mythos-actually-means-for-your-security-program): What Claude Mythos, the first AI model to autonomously complete a full corporate network takeover, means for security operations. - [What Microsoft ISOC Means for Security Operations](https://www.prophetsecurity.ai/blog/microsoft-isoc-security-operations): What Microsoft ISOC brings to Defender for E5 and E7 customers, what non-Microsoft data still costs and what to check first. - [What Jev (TypeSafe) Means for Security Operations](https://www.prophetsecurity.ai/blog/jev-security-operations): Where Jev, TypeSafe's System One model, fits in a SOC, what it cannot tell an analyst and what to test first. - [Databricks Just Bought Its Way Into the SIEM War](https://www.prophetsecurity.ai/blog/databricks-just-bought-its-way-into-the-siem-war): What the Databricks acquisition of Panther means for Splunk, CrowdStrike, Microsoft Sentinel and the SIEM market. - [The Truth About AI Cyber Attacks: Velocity, Not Novelty](https://www.prophetsecurity.ai/blog/the-truth-about-ai-cyber-attacks-velocity-not-novelty): An analysis of Google and Anthropic threat reports on whether AI changes attacks or accelerates them, and why security fundamentals still hold. ## Company News - [Introducing Prophet AI Detection Engineer: Find Every Coverage Gap and Close It](https://www.prophetsecurity.ai/blog/introducing-prophet-ai-detection-engineer-find-every-coverage-gap-and-close-it): July 2026 launch. Prophet AI Detection Engineer builds a live MITRE ATT&CK coverage map from a customer's own investigations, then authors and backtests detections to close the gaps. - [Prophet AI Threat Researcher: Emerging Threat Response](https://www.prophetsecurity.ai/blog/prophet-ai-threat-researcher-emerging-threats): Prophet AI Threat Researcher turns emerging threat intelligence into hunts that run automatically and rerun as reporting changes. - [Accelerating the Agentic AI SOC Movement with Amex Ventures and Citi Ventures](https://www.prophetsecurity.ai/blog/ai-soc-investment-amex-ventures-and-citi-ventures): February 2026 strategic investments from American Express Ventures and Citi Ventures. - [Prophet Security Raises $30M Series A Led by Accel](https://www.prophetsecurity.ai/blog/prophet-security-raises-30-million-series-a-led-by-accel): July 2025 Series A led by Accel, with participation from Bain Capital Ventures. - [Prophet Security Named to the 2025 Redpoint InfraRed 100](https://www.prophetsecurity.ai/blog/prophet-security-named-to-2025-redpoint-infrared-100-list): Recognition on Redpoint Ventures' list of 100 private companies shaping enterprise infrastructure. - [Prophet AI Now Integrates with Google Security Operations](https://www.prophetsecurity.ai/blog/prophet-ai-now-integrates-with-google-security-operations): Alert triage, threat hunting and bidirectional sync with Google Security Operations (Chronicle SIEM). - [Network Context for the Agentic SOC: Prophet Security and ExtraHop](https://www.prophetsecurity.ai/blog/network-context-for-the-agentic-soc-prophet-security-and-extrahop): Prophet AI investigates every ExtraHop RevealX detection end to end, bringing NDR detections and network telemetry into the agentic SOC. - [Collective Cyber Defense: Why Prophet Security Signed OpenAI's Open Letter](https://www.prophetsecurity.ai/blog/collective-cyber-defense): What OpenAI's open letter on collective cyber defense asks of enterprises, vendors and AI companies, and why Prophet Security signed it. - [Announcing Prophet Security](https://www.prophetsecurity.ai/blog/announcing-prophet-security): April 2024 launch of Prophet Security and its agentic AI SOC analyst, backed by $11M in seed financing from Bain Capital Ventures. ## Third-Party Coverage - [VentureBeat: Prophet Security raises $30M](https://venturebeat.com/ai/ai-vs-ai-prophet-security-raises-30m-to-replace-human-analysts-with-autonomous-defenders/): Coverage of the $30M Series A led by Accel (July 2025). - [Axios: Bain Capital Ventures backs new AI security startup in $11M seed round](https://www.axios.com/2024/04/23/bain-capital-ai-security-startup): Coverage of the seed round (April 2024). - [Business Wire: Prophet Security Secures $11M in Seed Financing](https://www.businesswire.com/news/home/20240423436213/en/Prophet-Security-Secures-11M-in-Seed-Financing-to-Supercharge-Security-Operations): Seed financing announcement (April 2024). - [Bain Capital Ventures: Prophet Security Heralds the Future of AI-Driven Investigation and Response](https://baincapitalventures.com/insight/prophet-security-is-using-ai-to-cut-mean-time-to-response-by-10x-for-security-operations-teams/): The seed investor's perspective on Prophet Security (April 2024). - [EIN Presswire: Prophet Security Automates Detection Engineering with AI Detection Engineer](https://www.einpresswire.com/article/930364590/prophet-security-automates-detection-engineering-with-ai-detection-engineer-expanding-its-agentic-ai-soc-platform): Launch announcement for Prophet AI Detection Engineer (July 2026). ## Webinars and Podcast - [Elevate, Don't Eliminate: What an AI-Powered SOC Really Looks Like](https://www.prophetsecurity.ai/webinar/elevate-dont-eliminate-what-an-ai-powered-soc-really-looks-like): Matt Bromiley and Henri Davis on what has changed with AI in the SOC and what should change (June 2026). - [Build vs. Buy vs. Vibe: The AI in the SOC Debate](https://www.prophetsecurity.ai/webinar/build-vs-buy-vs-vibe-the-ai-in-the-soc-debate): Former industry analysts Augusto Barros and Anton Chuvakin debate whether AI has changed the build-versus-buy equation for security operations (May 2026). - [AI SOC in Practice: A Security Leader's View](https://www.prophetsecurity.ai/webinar/ai-soc-in-practice-a-security-leaders-view): Webinar recording (January 2026). - [Hype Check: The State of AI in the SOC 2025](https://www.prophetsecurity.ai/webinar/hype-check-the-state-of-ai-in-the-soc-2025): Augusto Barros and Oliver Rochford on where AI in the SOC stands (December 2025). - [Ghosts in the Machine: The Practitioners' Guide to AI in the SOC and IR](https://www.prophetsecurity.ai/webinar/ghosts-in-the-machine-practitioners-guide-to-ai-soc-ir): Filip Stojkovski (SecOps Unpacked) and Matt Bromiley (SANS instructor, security R&D at Prophet Security) on AI in the SOC and incident response (October 2025). - [The ROI of AI in the SOC: Cost, Efficiency, and Team Capacity](https://www.prophetsecurity.ai/webinar/the-roi-of-ai-in-the-soc-cost-efficiency-and-team-capacity): Webinar recording (October 2025). - [Podcast](https://www.prophetsecurity.ai/podcast): Conversations with CISOs and security leaders about AI in security operations. - [Podcast: Accelerating Security Operations with AI](https://www.prophetsecurity.ai/podcast/leveraging-ai-accelerating-security-operations): John Barrow, CISO at J.B. Poindexter & Co., on the growing value of AI SOC solutions as earlier tools fall short. - [Podcast: SecOps Evolution: A CISO's Guide to an AI SOC](https://www.prophetsecurity.ai/podcast/secops-evolution-cisos-guide-to-an-ai-soc): Steve Lukose, CISO at Sunrise Senior Living and formerly CISO at Clari, on the shift from legacy security stacks to agentic AI. - [Podcast: Scaling Security and Business Outcomes with AI](https://www.prophetsecurity.ai/podcast/leveraging-ai-scaling-security-operations-business-outcomes): Erik Wille, CTO, SVP and CISO at Cabinetworks Group, on using AI judiciously to accelerate security and business outcomes. - [Podcast: Risk and AI: How CISOs Evaluate and Implement AI in SecOps](https://www.prophetsecurity.ai/podcast/risk-ai-how-cisos-evaluate-implement-ai-in-secops): Rinki Sethi, CSO at Upwind Security, on evaluating and implementing AI while managing risk. - [Podcast: Balancing AI and Human Oversight](https://www.prophetsecurity.ai/podcast/balancing-ai-and-human-oversight): Chad Kalmes, CISO and CIO at Udemy, on balancing AI-driven automation with human judgment. ## Company - [About Prophet Security](https://www.prophetsecurity.ai/about-us): Mission, leadership, investors, awards and press. - [Careers](https://www.prophetsecurity.ai/about-us#careers): Open roles. - [Partner Program](https://www.prophetsecurity.ai/partner): For MSSP and MDR providers, resellers and VARs, advisory and services firms, technology alliances and cloud marketplace partners. - [Prophet Security on AWS Marketplace](https://aws.amazon.com/marketplace/pp/prodview-xy555gpzgrrvq): Procure the Prophet Agentic AI SOC Platform through AWS Marketplace. - [Request a Demo](https://www.prophetsecurity.ai/request-a-demo): Start a demo or free proof of value. - [Contact Us](https://www.prophetsecurity.ai/contact-us) - [Trust Center](https://trust.prophetsecurity.ai/): Certifications, security controls, compliance documentation and subprocessors. - [Blog](https://www.prophetsecurity.ai/blog): All Prophet Security articles. ## Optional - [AI SOC Adoption Trends (2025 survey results)](https://www.prophetsecurity.ai/ai-soc-adoption-trends): Results page for the 2025 edition of Prophet Security's State of AI in the SOC survey. The 2026 findings are listed under Original Research and Reports. - [6 Key Takeaways from the AI in SOC Survey Report (2025)](https://www.prophetsecurity.ai/blog/6-key-takeaways-from-the-ai-in-soc-survey-report) - [Considering AI SOC Agents? Read This Gartner Report First](https://www.prophetsecurity.ai/blog/considering-ai-soc-agents-read-this-gartner-report-first) - [Hype Check: The State of AI in the SOC](https://www.prophetsecurity.ai/blog/hype-check-the-state-of-ai-in-the-soc) - [9 Advantages of AI SOC Analysts](https://www.prophetsecurity.ai/blog/9-advantages-of-ai-soc-analysts-that-arent-just-hype) - [What Is an AI Security Analyst? How It Changes Cyber Defense](https://www.prophetsecurity.ai/blog/what-is-an-ai-security-analyst-how-it-changes-cyber-defense) - [AI-Driven Alert Investigation: Fueling SOC Efficiency](https://www.prophetsecurity.ai/blog/ai-driven-alert-investigation-fueling-soc-efficiency) - [How AI Agents Are Transforming Incident Response in Modern SOCs](https://www.prophetsecurity.ai/blog/how-ai-agents-are-transforming-incident-response-in-modern-socs) - [How to Build an Agile SOC with AI SOC Agents](https://www.prophetsecurity.ai/blog/how-to-build-an-agile-soc-with-ai-soc-agents) - [How Agentic AI Transforms Tier 1, Tier 2, and Tier 3 SOC Analysts](https://www.prophetsecurity.ai/blog/how-ai-transforms-tier-1-tier-2-and-tier-3-soc-analysts) - [AI in Security Operations: How to Get Your SOC Team Ready](https://www.prophetsecurity.ai/blog/ai-in-security-operations-how-to-get-your-soc-team-ready) - [Can AI SOC Analysts Replace SIEMs? Looking Ahead](https://www.prophetsecurity.ai/blog/can-ai-soc-analysts-replace-siems-looking-ahead) - [Beyond the Data Moat: How AI SOC Startups Can Win the Cybersecurity War](https://www.prophetsecurity.ai/blog/beyond-the-data-moat-how-ai-soc-startups-can-win-the-cybersecurity-war) - [6 Essential Security Operations Use Cases for LLMs](https://www.prophetsecurity.ai/blog/6-essential-security-operations-use-cases-for-llms) - [How to Investigate GuardDuty Findings with ChatGPT](https://www.prophetsecurity.ai/blog/how-to-use-llms-like-chatgpt-4-to-investigate-aws-guardduty-alerts) - [To Build or Not to Build a SOC?](https://www.prophetsecurity.ai/blog/to-build-or-not-to-build-a-soc) - [How to Keep Up with Talent Attrition in a SOC](https://www.prophetsecurity.ai/blog/how-to-keep-up-with-talent-attrition-in-a-soc) - [SOC Analyst Career Path: Roles, Skills, and What AI Changes](https://www.prophetsecurity.ai/blog/soc-analyst-career-advancement-with-ai) - [How to Get Into Cybersecurity in the AI Era](https://www.prophetsecurity.ai/blog/how-to-get-into-cybersecurity-ai-era) - [Will AI Replace Cybersecurity Jobs?](https://www.prophetsecurity.ai/blog/will-ai-replace-cybersecurity-jobs) - [Security Policy](https://www.prophetsecurity.ai/security) - [Privacy Policy](https://www.prophetsecurity.ai/privacy-policy) - [Cookie Policy](https://www.prophetsecurity.ai/cookie-policy) - [Terms of Use](https://www.prophetsecurity.ai/terms-of-use)