Radiant AI SOC

What is Radiant AI SOC?

Radiant Security AI SOC Platform automates security-alert triage, investigation, and response across multiple security data sources. The platform uses artificial intelligence and research agents to investigate alerts, explain verdicts, escalate significant cases, and recommend or execute response actions.

Key Capabilities

Automated Alert Triage: Investigates alerts across email, endpoint, identity, network, cloud, insider threat, SIEM, web application firewall (WAF), data loss prevention (DLP), operational technology (OT), Internet of Things (IoT), dark web, and supply-chain sources.
Investigation Agents: Reuses existing investigation plans or generates new approaches for unfamiliar alert types.
Explainable Decisions: Provides an audit trail showing the data analyzed, reasoning used, and basis for escalation or closure.
Integrated Response: Allows analysts to execute recommended remediation actions directly from an escalated case.
Log Management: Collects, stores, searches, and analyzes security logs, including logs retained in a customer-controlled Amazon S3 bucket.
SOC Workflow Centralization: Combines alert triage, response, and log analysis while integrating with existing security information and event management (SIEM), security orchestration, automation and response (SOAR), and managed detection and response (MDR) tools.
Policy Customization: Supports organization-specific context, thresholds, and response policies.

Audience & Use Cases

Audience: Security operations center (SOC) managers, security analysts, incident responders, detection engineers, and managed security service providers (MSSPs).
Use Case: Automating repetitive alert investigations, reducing alert queues, supporting after-hours monitoring, enriching escalations with supporting evidence, and coordinating response across distributed security tools.

Technical Specifications

Platform Model: Cloud-based AI SOC platform.
Coverage: Structured and unstructured alerts across multiple security layers and attack surfaces.
Core Functions: Alert triage, investigation, log management, case escalation, response recommendations, and remediation execution.
Integration Model: API-based connectors for security, identity, cloud, network, email, logging, and response systems.
Oversight: Analyst review, transparent reasoning, and human-controlled response actions.