Prophet Security
Prophet Security sells an AI SOC platform that describes itself as agentic and triages alerts and responds through scoped actions, deployed single-tenant. It places eleventh of 14 at 4.87, level with Mate Security, because its public pages document none of the 25 containment actions. It publishes no time-to-contain figure with a method, no price and no approval tiers.
What Prophet Security is
Prophet describes its product as agents that triage and investigate alerts, hunt, and build detections, connected to the tools a team already runs (prophetsecurity.ai, read 2026-11-03, vendor claim). It is deployed as a single-tenant system.
A 24x7x365 human-expert service called Watchtower is sold alongside the autonomous product. The vendor says the autonomous product takes only actions the customer has approved, and that remediation is previewed before it runs (prophetsecurity.ai/ai-soc-analyst, read 2026-11-03, vendor claim).
vendor claim Agentic AI SOC platform. Agents triage and investigate alerts, hunt for threats and build detections, and connect to existing security tools. Deployed as a single-tenant system. A 24x7 human-expert service (Watchtower) is sold alongside it. prophetsecurity.ai, read
Products named: Prophet AI SOC Analyst, Prophet AI Detection Engineer.
no figureon the pages read
Published time to contain
No figure on time to contain, or on any adjacent response metric, was found for Prophet Security on the pages read.
0 of 250 of 5 domains
Containment coverage
Of 25 containment actions across EDR, identity, email, cloud and network, Prophet Security documents 0 as native or partner on the pages read: 0 native, 0 partner, 0 custom step only, 25 not documented. Coverage share is 0 percent.
- native, vendor-documented
- partner or third-party documented
- custom step only
- not documented on the pages read
| Platform | EDR | Identity | Cloud | Network | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Isolate host | Release isolation | Kill process | Quarantine file | Run script or live response | Block hash | Disable user | Force password reset | Revoke sessions or tokens | Require MFA re-enrolment | Remove from group or role | Delete a delivered message | Quarantine a delivered message | Block sender or domain | Remove a URL rewrite exemption | Pull from quarantine | Disable IAM user or access key | Revoke cloud session | Isolate or stop an instance | Change a security group or firewall rule | Revoke OAuth app consent | Block IP or domain at the firewall | Block at the proxy or DNS filter | Disable a switch port or NAC quarantine | Add to a threat list on the NDR | |
| Prophet Security0 of 25 documented | Prophet Security: Isolate host, not documented | Prophet Security: Release isolation, not documented | Prophet Security: Kill process, not documented | Prophet Security: Quarantine file, not documented | Prophet Security: Run script or live response, not documented | Prophet Security: Block hash, not documented | Prophet Security: Disable user, not documented | Prophet Security: Force password reset, not documented | Prophet Security: Revoke sessions or tokens, not documented | Prophet Security: Require MFA re-enrolment, not documented | Prophet Security: Remove from group or role, not documented | Prophet Security: Delete a delivered message, not documented | Prophet Security: Quarantine a delivered message, not documented | Prophet Security: Block sender or domain, not documented | Prophet Security: Remove a URL rewrite exemption, not documented | Prophet Security: Pull from quarantine, not documented | Prophet Security: Disable IAM user or access key, not documented | Prophet Security: Revoke cloud session, not documented | Prophet Security: Isolate or stop an instance, not documented | Prophet Security: Change a security group or firewall rule, not documented | Prophet Security: Revoke OAuth app consent, not documented | Prophet Security: Block IP or domain at the firewall, not documented | Prophet Security: Block at the proxy or DNS filter, not documented | Prophet Security: Disable a switch port or NAC quarantine, not documented | Prophet Security: Add to a threat list on the NDR, not documented |
Basis: Prophet integrations page (a catalogue of 200+ integrations by category, no action lists), llms.txt and the AI SOC Analyst page. No public integration docs site was reachable (docs.prophetsecurity.ai did not resolve). Read 2026-11-04.
Limits: Integration catalogue names tools, not actions.
The full grid, with the page behind each cell, is on the scorecard. A cell reads not documented when the pages read did not show the action. That is a finding about public material, not a claim that the action is absent.
4.87rank 11 of 14
Rubric scores
Prophet Security is in a band with Microsoft Sentinel (5.14), Dropzone AI (5.00), Mate Security (4.87). A band is a run of neighbouring totals. Bands chain: a new band starts only where the gap to the total above exceeds 0.25, so a band can be wider than 0.25 and the order inside it is not an order.
| Criterion | Weight | Score | Points | Status, reason and source |
|---|---|---|---|---|
| Native containment coverage | 25 | 2.0 | 0.500 | not documented. 0 of 25 containment actions documented as native or partner (0 percent) across 0 of 5 domains. Score is 2.0 plus 7.5 times the share, capped at 9.5. |
| Published time-to-contain evidence with method | 15 | 5.0 | 0.750 | partial. Claims "validated escalations in under 30 minutes" (Watchtower) and a customer 95 percent review reduction; no method, and neither is containment time. vendor claim prophetsecurity.ai, read |
| Approval, rollback and blast-radius controls documented | 15 | 6.5 | 0.975 | partial. Page says it "Responds through scoped Agent Actions, autonomously or with your sign-off"; tiers, rollback and scope limits are not stated. vendor claim prophetsecurity.ai, read |
| Explanation and audit trail | 15 | 5.5 | 0.825 | partial. Page says "determinations you can audit"; record contents and export not described. vendor claim prophetsecurity.ai, read |
| Integration depth documented | 10 | 7.0 | 0.700 | partial. Page states "200+ out-of-the-box integrations"; no action list. vendor claim prophetsecurity.ai, read |
| Detection-to-response coupling | 8 | 6.5 | 0.520 | partial. Ingests through 200+ integrations; whether a SIEM is needed is not stated. prophetsecurity.ai, read |
| Pricing transparency | 6 | 3.0 | 0.180 | not documented. No price on the page. prophetsecurity.ai, read |
| Deployment and data handling | 6 | 7.0 | 0.420 | partial. Page states "dedicated single-tenant, with bring your own key option and no training of AI models with personal data"; regions and retention not stated. vendor claim prophetsecurity.ai, read |
| Total | 100 | 4.87 | Sum of the eight weighted points above, to two decimals. | |
Scores are proposals under the rubric bands, computed in code from the published weights. Where a score rests on a vendor's marketing page only, a read of its documentation can move it.
Where Prophet Security is strong
- Vendor claim: the autonomous product takes only actions the customer has approved, remediation is previewed before it runs, and learned changes are previewed and backtested before they apply. prophetsecurity.ai, read
- Vendor claim: the home page says deployment is dedicated single-tenant, with a bring-your-own-key option and no training of AI models with personal data. Regions and retention are not stated. prophetsecurity.ai, read
- Vendor claim: the integrations page lists 200+ out-of-the-box integrations, with Microsoft Sentinel, Splunk, Elastic, Google Security Operations, Okta, Microsoft Entra ID and Zscaler named. A named list is public, though no action list is. prophetsecurity.ai, read
Where Prophet Security is behind
- Time-to-contain evidence: none with a method. The pages claim validated escalations in under 30 minutes for the Watchtower service and responses 10x faster, with no baseline or sample. Neither is a containment time. A blog post on mean time to contain is listed with the date 2026-10-28; this site records it as a definitions post, not a measured figure. prophetsecurity.ai, read
- The home page says responses run through scoped Agent Actions, autonomously or with sign-off. Approval tiers, rollback and scope limits are not stated. prophetsecurity.ai, read
- No price is published. The pricing URL returned HTTP 404 on 2026-11-03, and the integration count is inconsistent: the product menu says 200+ while the grid shows 75 names. prophetsecurity.ai, read
What only Prophet Security has
Prophet's free proof of value gives read-only access to two or three data sources, and the page says setup takes 30 minutes or less. prophetsecurity.ai, read
nonelisted
Pricing as published
vendor claim Not published on the fetched pages. The pricing page returned HTTP 404 on 2026-11-03. The AI SOC Analyst page offers account creation and a free proof of value. prophetsecurity.ai, read
Trial or free tier. Free proof of value after account creation, with read-only access to two to three data sources. Setup is described as 30 minutes or less. prophetsecurity.ai, read
Integrations. 200 published as a count; named: Microsoft Sentinel, Splunk, Elastic, Google Security Operations (Chronicle), CrowdStrike Falcon Next-Gen SIEM, Wiz, Okta, Microsoft Entra ID, Zscaler, Cisco Umbrella, Abnormal Security, Proofpoint, Slack, Microsoft Teams. vendor claim prophetsecurity.ai, read
11names on its pages
Named customers
Customers below are names on Prophet Security's own pages, so each is a vendor claim. A logo is not a reference, and none of these entries says what the customer uses the product for.
- Cabinetworks, JBPCO, Upwind, ZIP, Redis, Udemy, Instacart, Moveworks, Bill, Penske, Repay. prophetsecurity.ai, read
3dated entries
Recent releases
| Date | Release | Source |
|---|---|---|
| 2025-07-29 | Prophet Security Raises $30M Series A Led by Accel to Launch its Agentic AI SOC Platform. Series A led by Accel, with Bain Capital Ventures participating and other unnamed strategic investors. | vendor claim prophetsecurity.ai, read |
| 2026-07-30 | Introducing Prophet AI Detection Engineer: Find Every Coverage Gap and Close It. Launch of the detection engineering agent. | vendor claim prophetsecurity.ai, read |
| 2026-10-28 | Mean Time to Contain (MTTC) vs MTTR in an AI-Driven SOC. Blog post on MTTC and MTTR definitions. Not a product release. | vendor claim prophetsecurity.ai, read |
6graded
Claims Prophet Security makes about itself
Each is a vendor claim, graded A to D on the method published: A independent with method, B vendor-measured with sample and method, C a number with no method, D unverifiable. This site's own voice does not repeat any of them as fact.
| Claim | Method stated | Grade | Source |
|---|---|---|---|
| Alerts are resolved in seconds, not hours | not stated. Measured by vendor. | C | vendor claim prophetsecurity.ai, read |
| Validated escalations in under 30 minutes | not stated. Measured by vendor. | C | vendor claim prophetsecurity.ai, read |
| Investigates and responds to alerts 10x faster | not stated. Measured by vendor. | C | vendor claim prophetsecurity.ai, read |
| Full dynamically planned investigation on 100 percent of alerts, at every severity | not stated. Measured by vendor. | C | vendor claim prophetsecurity.ai, read |
| Cut the need for manual review by 95 percent | not stated. Measured by customer. | C | vendor claim prophetsecurity.ai, read |
| Cabinetworks cut the alert queue from thousands to dozens | not stated. Measured by customer. | C | vendor claim prophetsecurity.ai, read |
Who should shortlist Prophet Security
- You want a single-tenant deployment with your own encryption key and a written no-training statement.
- You want a proof of value on read-only access before any action is approved.
- You want a vendor that sells a human expert service beside the software, for coverage outside business hours.
Prophet Security places 11th of 14, level with Mate Security at a total of 4.87, with 0 of 25 containment actions documented. Treat it as an investigation platform until its pages name containment actions. The scorecard finds none of the 25, which is a finding about public material and not a claim that the product cannot act. Approval tiers, rollback and a price are also unpublished.
The same platform under other weights
- Regulated financial: 12th of 14, total 5.14.
- Lean team: 12th of 14, total 4.73.
- MSSP: 10th of 14, total 4.94.
- Microsoft estate: 11th of 14, total 4.85.
- CrowdStrike estate: 11th of 14, total 4.78.
Compare Prophet Security
- Prophet Security alternatives: 3 gaps and 5 platforms that answer them.
- Prophet Security against Mate Security, totals 4.87 and 4.87.
- Prophet Security against Dropzone AI, totals 4.87 and 5.00.
- Prophet Security against Microsoft Sentinel, totals 4.87 and 5.14.
- Prophet Security against ServiceNow Security Operations, totals 4.87 and 4.16.
Facts on this page were read 2026-11-04 and the days before it; the date beside each source is the date it was read. Last updated 4 November 2026.