Andesite AI

Human-AI SOC platform for alert investigation, threat hunting, scoping and remediation

ToolTier 2 SOC AutomationCloudSelf-hosted

Pricing: Not published. The vendor FAQ describes pricing as outcome-based rather than AI-usage-based; contact sales.

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed August 2026 · How we review listings

What is Andesite AI?

Andesite AI, based in McLean, Virginia, sells what it calls the Human-AI SOC, connecting SIEM, SOAR, identity and other sources so configurable agents can automate investigation, high-volume alert handling and enrichment. Vendor pages describe threat hunting to determine scope, assessing scope and blast radius, and launching remediation directly from investigation findings, with an Evidentiary AI audit trail behind each conclusion. Founded in 2023, it has raised $38.25m from General Catalyst and Red Cell Partners, and announced FedRAMP High Authorized status on 31 March 2026. Deployment is SaaS, air-gapped self-managed, or hybrid.

Best for: Regulated and public-sector SOCs needing investigation, hunting and response automation with FedRAMP High and air-gapped options.
Pros
  • FedRAMP High Authorized status announced March 2026 (vendor press release)
  • Air-gapped self-managed deployment is offered, which is rare in this category (vendor FAQ)
  • SOC 2 Type II and ISO 27001, 27701 and 42001 stated by the vendor on the product page
  • $38.25m raised from General Catalyst and Red Cell Partners (vendor release; SiliconANGLE February 2025)
Things to check
  • Pricing is not published
  • No named customers appear in the general-availability release
  • A G2 listing exists but its review count could not be verified
  • FedRAMP Marketplace entry and sponsoring agency were not independently confirmed at research time

Reported in public reviews and vendor documentation. See sources below.

Key Features

Alert investigation with AI-assisted enrichment playbooks
Threat hunting with scope determination
Scope and blast-radius assessment with response actions
Remediation launched from investigation findings
Configurable agents and playbooks for triage, investigation and response
Evidentiary AI audit trail
No-ETL integration with SIEM, SOAR, email and identity sources
SaaS, air-gapped or hybrid deployment

Are you Andesite AI? Improve this listing with screenshots, case studies and more.

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Spot an error, or do you represent Andesite AI? Request a correction.

Quick Info
PricingNot published. The vendor FAQ describes pricing as outcome-based rather than AI-usage-based; contact sales.
ModelContact sales (outcome-based, vendor-stated)
Founded2023
CloudYes
Self-HostedYes

Last updated: Aug 20, 2026

Certifications
FedRAMP High Authorized (vendor press release)SOC 2 Type II (vendor-stated)ISO 27001, 27701 and 42001 (vendor-stated)CSA STAR / AI-STAR Level 2 (vendor-stated)