Prophet Security builds Prophet AI, an agentic platform for security operations centres. Its AI agents triage and investigate every alert as it arrives, respond within limits the customer sets, hunt for threats and write new detections, which takes the bulk of repetitive alert work off SOC analysts while keeping a full record of each decision.
It is built for security teams that cannot hire enough analysts to keep up with their alert volume, and that need agent autonomy to stay within limits they control.
At A Glance
| Vendor | Prophet Security |
|---|---|
| Category | Security operations (agentic AI SOC platform) |
| Deployment | Dedicated single-tenant instance, with a bring your own key option |
| Agentic AI | AI SOC Analyst, AI Threat Hunter and AI Detection Engineer agents |
| Customers | Instacart, Udemy, Redis, Penske, Cabinetworks |
| Certifications | SOC 2 Type II, ISO/IEC 27001:2022, ISO/IEC 42001:2023 |
| Market classification | Security Operations |
What Prophet Does
SOC teams receive far more alerts than analysts can investigate, so low-severity alerts are often closed unread. Prophet AI investigates every alert at every severity the moment it arrives, plans the questions an experienced analyst would ask and runs several investigations in parallel. The agents share what they learn across detection engineering, investigation, response and hunting, and they take on each customer’s own context and policies, which are previewed and backtested before being applied across the platform. Coverage spans endpoint, email, identity, cloud, data loss prevention and network alerts.
Products
AI SOC Analyst
The AI SOC Analyst is the investigation agent for teams overwhelmed by alert queues. It works through each alert, reaches a determination and records every question asked, every query run and every reasoning step so analysts can check its work. Related investigations are grouped into a single incident, and response happens through scoped Agent Actions, either autonomously or after sign-off, limited to actions the customer has approved.
AI Threat Hunter
Threat hunting usually needs analysts who can write complex queries. The AI Threat Hunter lets anyone on the team ask questions of their environment in plain language to find threats that never raised an alert.
AI Detection Engineer
Detection engineers use this agent to find gaps in coverage. It maps the customer’s own investigation data to the MITRE ATT&CK framework to show what the team can detect and which detections have gone quiet, then drafts and tests new rules. Every detection is versioned, backtested and reversible, and teams can begin in suggest-and-inform mode, reviewing each change before it ships. It works with Splunk, Sumo Logic and Microsoft Sentinel and is switched on for existing AI SOC Analyst customers through their account team.
Prophet AI Watchtower
Watchtower is a 24x7x365 human expert service for organisations that want people checking the agents. Experts review every malicious determination and send validated escalations within 30 minutes.
How It Works
Each customer runs on a dedicated single-tenant instance and can bring its own encryption key. Personal data is not used to train AI models. Teams teach the platform their playbooks, policies and preferences, and each piece of guidance shows its source so it can be corrected. Before a change to guidance or a remediation takes effect, Prophet previews it and backtests it against the customer’s own history. The agents connect to existing security, case management and collaboration tools through more than 200 out-of-the-box integrations.
Identities And Systems Covered
| Human users | Identity provider alerts such as suspicious logons, checked against session activity, logon behaviour, IP reputation and endpoint activity. |
|---|---|
| Identity providers | Ping Identity, Okta and Microsoft Entra ID. |
| Identity threat tools | CrowdStrike Falcon Identity Protection and Microsoft Defender for Identity. |
| Cloud | AWS, Microsoft Azure and Google Cloud Platform. |
| Endpoint | Microsoft Defender, PAN Cortex XDR, SentinelOne and CrowdStrike Falcon. |
| Abnormal Security, Mimecast, Sublime Security, Proofpoint, Gmail and Exchange Online. | |
| Other alert sources | Data loss prevention and network tools. |
Integrations
| Area | Integrations |
|---|---|
| SIEM | Splunk, Microsoft Sentinel, Elastic, Sumo Logic, IBM QRadar, Google Security Operations (Chronicle), CrowdStrike Falcon Next-Gen SIEM, Rapid7 IDR, Datadog, Panther, Hunters, Anvilogic |
| Case management | ServiceNow, Jira, TheHive, Linear, GitHub, Datadog Case Management |
| Collaboration | Slack, Microsoft Teams, PagerDuty |
Company Background
| Leadership | Kamal Shah (CEO) and Vibhav Sreekanti (CTO). |
|---|---|
| Funding | A reported $30M raised, with backing from Bain Capital, Accel, Citi Ventures and Amex Ventures. |
| Compliance | Certifications run under an integrated management system, and independent assessments of controls relevant to GDPR, CCPA and HIPAA found no exceptions. |
Note: This overview is compiled from Prophet’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.