VinciLogic runs security operations on AI agents. Its platform pairs an AI SOC with a security data lake the customer configures, so detection, investigation and response all work from the same stored evidence. Security teams that struggle with alert volume can hand triage and first-line investigation to agents while keeping control over which actions those agents may take.
Customers can run the platform with their own analysts or have VinciLogic operate it for them as a managed service.
At A Glance
| Vendor | VinciLogic |
|---|---|
| Category | Security Operations, AI SOC and security data lake |
| Agentic AI | Triage, investigation and response agents with configurable permissions |
| Customers | BDO, Orange, Crédit du Maroc, Bally, Solocal |
| Market classification | Security Operations |
What VinciLogic Does
A typical SOC spends much of its time collecting context for alerts before anyone can decide what to do. VinciLogic lets agents gather that context, investigate and carry out response, recording evidence and results in each case. Detection and the data it runs on sit in one system rather than in a SIEM and a separate case tool, which removes the copying and lookups between them. Sources, findings and action results stay linked in the case record, so each investigation keeps its evidence, decisions and follow-up together.
Products
AI SOC Platform
The AI SOC Platform gives a security team native detection, case management and response on top of its own data lake. Analysts can use AI to write and refine detection rules and review their MITRE ATT&CK coverage. Each case holds findings, decisions, action results and follow-up, and the platform’s agents work inside it.
Security Data Lake
The data lake cuts the cost and noise of security logging. It normalises and enriches logs, aggregates repetitive events and strips unnecessary fields, while original events go to retention before the analytics stream is reduced.
- Analytics on ClickHouse, Apache Doris, Elasticsearch, OpenSearch or Splunk
- History kept in S3 and other object stores, with retention set around evidence needs
- One query service across analytics engines, Parquet files and Iceberg tables
AI MDR
For organisations that want round-the-clock coverage without building a team, the MDR service provides 24/7 detection, investigation and response delivered by AI agents and managed by VinciLogic. The service escalates to the customer when a business decision is needed, and acts only within agreed response permissions.
How It Works
Events move from collection through a data plane into storage, and the SOC modules work on top.
| Component | What it does |
|---|---|
| Ingestion | Events arrive through APIs, agents and log forwarding and are routed to the destinations the customer chooses. |
| Data plane | Parse, Normalize, Enrich, Optimize and Route stages prepare data before analytics. |
| Storage | Analytics engines and object storage are configured per workload, including Amazon S3, Azure Blob Storage and Google Cloud Storage. |
| SOC modules | Detection, Investigate, Cases, Policy and Respond read from that storage and write their results back into the case record. |
Agentic AI Capabilities
Agent Roles And Permissions
Triage agents prioritise signals, investigation agents query related events, enrich suspicious indicators and assemble findings in the case, and response agents run the actions they are permitted to take. Each action is set to run automatically, require approval or stay blocked. Customers also choose which data sources and tools each agent can use, so sensitive actions wait for a person and some actions are never available to an agent at all. Through connected tools, response agents can isolate endpoints, disable compromised accounts and reset credentials.
Integrations
| Area | Integrations |
|---|---|
| Endpoint and XDR | CrowdStrike Falcon (collection, enrichment, response), SentinelOne, Microsoft Defender XDR |
| Identity and access | Active Directory and Microsoft Entra ID (collection, response) |
| Cloud, network and SaaS | Amazon Web Services, Google Cloud, Microsoft 365, Cloudflare, Fortinet FortiGate, Palo Alto Networks PAN-OS |
Company Background
| Offering | Software (AI SOC Platform and Security Data Lake) plus AI MDR, a managed service operated by VinciLogic. |
|---|---|
| Services | The VinciLogic team handles onboarding, customer success and ongoing support for its customers. |
| Integration catalogue | 73 connectors across cloud and infrastructure, endpoint security, identity and access, network security, email and collaboration, threat intelligence and IT service management. |
Note: This overview is compiled from VinciLogic’s publicly available information as of 4 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.