Conifers.ai vs Legion Security
Conifers.ai
Conifers.ai, headquartered in Dallas with a Tel Aviv office, launched publicly in January 2025 with $25m led by SYN Ventures. Its CognitiveSOC platform runs coordinated agents across threat intelligence, threat hunting, detection engineering, investigation and response on top of existing SIEM, SOAR and XDR tooling through more than 90 integrations. Investigations produce a verdict, narrative, entity map, blast radius and chain of events, and remediation plans can be reviewed before they run. The vendor's trust centre states SOC 2 Type II and ISO/IEC 27001, with deployment as managed SaaS or inside the customer's own Azure tenant.
Pros
- Blast radius, chain of events and hunting are shown on the product page rather than claimed abstractly (conifers.ai/ai-soc-agents)
- Gartner named Conifers the vendor to beat in AI SOC agents for threat investigation, per the vendor release quoting the December 2025 report
- SOC 2 Type II and ISO/IEC 27001 stated on the trust centre, with an in-tenant Azure deployment option
- $25m raised from SYN Ventures and Picus Capital at public launch (SecurityWeek, January 2025)
Pricing: Not published; contact sales
Legion Security
Legion Security helps enterprise security teams scale detection, investigation and response using agentic AI. The platform captures and learns from the real workflows analysts already use, and turns those actions into agentic playbooks the team can trust. The vendor positions this as a way to adopt frontier AI models gradually while keeping operational trust, reducing manual effort and preparing for autonomous security capabilities. It deploys through the analyst's browser rather than through API integrations, and uses vision models combined with other methods to observe how analysts investigate alerts, so the enterprise can either codify those processes or optimise them into visual agentic workflows that the team can inspect. Legion Security has offices in New York and Tel Aviv and is backed by Coatue, Accel and Picture, with investors from Island, CrowdStrike, Wiz and Google DeepMind. The company was founded in 2024 by former Microsoft Sentinel team members and emerged from stealth in July 2025.
Pros
- Raised $38M total: an $8M seed led by Picture Capital and Accel, and a $30M Series A led by Coatue (Calcalist, Fortune)
- Founding team includes former members of Microsoft's Sentinel product, per Calcalist
- Browser-based deployment is designed to avoid custom API integration work, per the company
- Customers cited on the vendor site report outcomes such as an 81% reduction in MTTI/R (WELL Health Technologies, vendor-cited)
Pricing: