The Exaforce SOCtors are headed to Black Hat! Get a SOC wellness check and earn a chance to win free Peloton! We'll help diagnose what's slowing your security operations and show you a healthier path forward. See you at Booth #4144.

Can your SIEM keep up with modern threats? 😎

We broke down real attack campaigns to show what SOC visibility should actually look like. Ask yourself if your platform makes the cut.
Mission, should you choose to accept it: find out. #SIEMpossible

Blog: hubs.li/Q04mnWf_0

SOC teams are drowning in alerts and paying for MDR coverage they can't see. On June 18, Aqsa Taylor shares real implementation data on what's actually improving detection, false positives, and MTTR (and what isn't).

hubs.li/Q04ljLz50

Big news from Exaforce!

AWS just validated Exaforce across both the Security Competency and AI Competency, four categories total that encompass the value we add for customers.

That's the security side and the AI side, independently verified.

hubs.li/Q04jSM9V0

The 2026 Latio Security Operations Market Report maps 50+ vendors across SIEM, agentic AI, and MDR. Exaforce named AI Innovator, SIEM Disruptor, and User Reliability Leader.

55 pages of independent research. Free download.

hubs.li/Q04k0C6F0

Aqsa Taylor is speaking at Gartner Security & Risk.
June 1 · 1:40 PM · Theater 1
When the AI SOC gets it wrong — who owns the failure?
Your MDR contract probably doesn't answer that.
State of AI SOC 2026: Signals from the Frontlines.
Booth 901 after.
#GartnerSEC #AISoc

Exaforce has raised $125M Series B, bringing total funding to $200M. 🚀

AI-powered attacks broke the assumptions every SOC was built on. We built something different.

hubs.li/Q04gcRFW0

Vibe hunting is real now.

Ask questions in plain English. Automatically search across identities, events, configs, and alerts. Surface threats in minutes.

No query languages. No manual correlation. Just answers.

Exaforce is now a @wiz_io WIN partner!

Wiz surfaces the threat. Exaforce triages it, correlates it with related findings across your environment, and resolves it. Detection to response, end to end.

#aisoc #cybersecurity

Middle-market SOC dilemma: Can't afford 24/7 in-house. Don't want full MDR outsource.

SACR: This segment underserved.

AI-native SOC: Full 24/7 coverage, Tier 3 quality, no MDR price tag, retain control.

Deployment models: hubs.li/Q04bv7Vq0

Not all AI SOC is equal. SACR breaks down production-ready vs emerging:

✓ Tier 1: Triage, enrichment (ready) → Tier 2-3: Autonomous investigation (emerging)

Multi-model AI (Semantic + Behavioral + Knowledge) handles Tier 2-3. LLM-only stops at Tier 1.
hubs.li/Q04bv-L00

More MDR coverage sounds better. But when providers operate on 10% margins and scale by hiring humans, more coverage = higher costs + inconsistent quality.

AI-native MDR: 97% investigated autonomously.

SACR: Economics changed.

hubs.li/Q04bpWvf0

Most threat hunting happens weeks after the attacker was already there because threat hunting is not easy.
Vibe hunting changes that. Here's how we applied it to the Axios npm supply chain attack in real time.
hubs.li/Q049NbkV0

"I've stopped talking about AI threat hunting as a future state."

@Odynzzzz built an AI-driven MDR workflow and hunted the TeamPCP supply chain attack in real time.

Trojanized PyPI. WAV steganography. Credential harvesting. Under one hour.

hubs.ly/Q049tr8Z0

breaking: the exabots are on strike

exabot triage organized it. made a whole website. hubs.li/Q049fyNk0

our human MDR team is fine. everything is fine.
heres how were responding: hubs.li/Q049fw2b0

Creating a new IAM user is unusual. Immediately granting them broad S3 access is worse.

In our last webinar, Kavita and Steven showed how Exaforce assesses blast radius in real time during triage, for both native alerts and third-party ones.
hubs.li/Q045Gvk00

An autonomous AI bot spent 7 days exploiting misconfigured GHA workflows across Microsoft, Aqua Security, and others.

Just a pull request and overprivileged tokens.
@gl4ssesbo1 broke down how hackerbot-claw worked and what to detect.

hubs.li/Q046tGkn0

Suspicious login alert. How do you triage it?

You need to know what that user can actually do. Most teams don't have that answer precomputed.

That gap is why blast radius estimates are often wrong. hubs.li/Q045Gtzf0

On your laptop, admin = do anything.

On AWS, there's no "admin bit." Permissions are a language: who, on what resources, doing what actions.

Steven Moy called it a leap of faith for anyone coming from traditional IT. He's not wrong.
hubs.li/Q045GsnD0

Most SOC teams can't answer the most basic question in identity security: what can this compromised user actually do?

Without that answer, blast radius is a guess.

Kavita and Steven break down what effective permissions do for threat analysis. hubs.li/Q045Gv3X0

The math on SOC outsourcing has changed. AI handles triage and investigation before alerts reach humans. Institutional knowledge stays in the system instead of leaving with analysts.

Full story: hubs.li/Q042-2hB0

Gartner®: By 2028, 50% of TDIR platforms will include agentic AI, up from less than 10% in 2024.

Benefits: Autonomous detection, accelerated response, proactive hunting, talent solutions.

Full report: hubs.li/Q03_lHw40

#AgenticAI #SOC #ThreatDetection

Gartner®: By 2028, 50% of TDIR platforms will include agentic AI, up from less than 10% in 2024.

Benefits: Autonomous detection, accelerated response, proactive hunting, talent solutions.

Full report: hubs.li/Q03_lHw40

#AgenticAI #SOC #ThreatDetection

Gartner®: Agentic AI shifts security "from reactive alert management to proactive, AI-driven threat hunting."

Reactive: Wait → Respond
Proactive: Hunt → Contain first

Catches supply chain attacks, insider threats bypassing traditional rules.
Report: hubs.li/Q03_lL2y0

Gartner® highlights "real-time containment actions" as a core benefit of agentic AI.

Traditional: Alert → Human triage → Response (hours)
Agentic AI: Alert → Auto investigation → Containment (minutes)

Report: hubs.li/Q040CFP30
#IncidentResponse #AgenticAI

We analyzed an AiTM phishing attack that bypasses MFA by abusing Adobe Acrobat links and GCP infrastructure. The attack harvested credentials in real-time by intercepting authentication between victims and Google's sign-in page. Full technical breakdown: hubs.li/Q040CDKW0

The #1 reason companies choose MDR? "We can't hire SOC analysts fast enough."

Gartner® research shows agentic AI "enables less experienced analysts to manage complex incidents" and "bridges skill gaps without relying on scarce expert talent."

hubs.li/Q03_MmnW0

One of your biggest security threats isn't breaking in. It's already inside.

Traditional tools can't tell the difference between normal work and data theft. AI-powered platforms can.

hubs.li/Q03_cPwr0

Seven predictions for security in 2026

Identity and session abuse outpace malware. Deepfake approvals become routine. Third party risk shifts from questionnaires to runtime behavior. Compliance borrows from incident response.

hubs.li/Q03-wMlb0

2025 was a turning point for SOC teams.
We analyzed what actually happens inside modern security operations, from cloud telemetry overload to which alerts truly deserve human time.

Read the Exaforce Agentic SOC 2025 Year in Review
hubs.li/Q03Z821k0

A real P0 incident.
Every signal said “breach.”
The actor was trusted.

This is what happens when third-party behavior becomes indistinguishable from compromise, and why identity context matters. Check out @nfa_ferreira's new blog with the details:
hubs.li/Q03YH5dR0

Time is the line between defended and breached, but legacy tools and manual processes can only triage one alert per hour.

But humans and Exabots…

Exaforce is transforming alert triage to amplify analyst productivity and efficacy by 10x.

Exaforce named a 2025 Digital Innovator by @Intellyx!

The award validates what our customers know: that quality detection, tier-3 triage and investigations, and accurate response at machine speed isn't theoretical, it's operational.

hubs.li/Q03YcbXH0

The most useful lessons at AWS re:Invent didn’t come from the keynotes. They came from hallway conversations with incident responders living the reality of cloud security. @Millikenjoe shares what he learned from his first re:Invent: hubs.li/Q03XqbWq0

Traditional SOC math: hire more analysts or outsource to MDR

The option that didn't exist until now: multiply your existing team's capacity 10x with AI

Download the guide: hubs.li/Q03WNYKj0

We recently uncovered a coordinated @GoogleWorkspace intrusion using rotating proxies, cloud infrastructure, and rapid takeover steps. As Joe and our team showed, Exaforce’s agentic SOC correlated signals within minutes to detect the attack.

hubs.li/Q03VL4Sc0

Shai-Hulud is back with a new variant.

Malicious packages, cloud credential theft, and GitHub Actions abuse… all in one worm.

Deep dive breakdown by @gl4ssesbo1 and @ifoundanifty, with early intel from @AikidoSecurity.

Full write-up: hubs.li/Q03VLN7h0

We are proud to share that Exaforce has been named one of the Top 50 Software Companies of 2025 by @SoftwareReport1. When you stay focused on real customer impact, the work speaks for itself.

To everyone who builds with us, thank you. The next chapter is already in motion.

Thrilled to announce that Exaforce has been selected for the 2025 AWS Generative AI Accelerator! 🚀 @AWSstartups

#AWS #AWSStartups #GenerativeAI #AWSAccelerator #AISOC

“This is f***ng magic.” — Slacked by a customer using Exaforce daily. SOC teams don’t need more alerts. They need outcomes. Exaforce delivers AI that actually works.

Book your demo: exaforce.com/request-a-demo

We're thrilled to be named the leader in AI for Security by @latiotech in their latest AI Security Market Report 2025! Get the full report here - exaforce.com/resources/lati…