Stellar Cyber Open XDR / AI-Native SecOps Platform

Stellar Cyber is a security operations software company founded in 2015 and based in San Jose, California. It addresses a common problem for lean security teams and managed security providers: alerts and telemetry are spread across many separate tools, so analysts spend most of their time triaging noise instead of stopping attacks.

Its open SecOps platform ingests data from any vendor's EDR, firewall, cloud and identity tools and unifies SIEM, network detection and response including OT, identity threat detection, UEBA, investigation, triage and response under one license. A Multi-Layer AI engine combines machine learning, graph-based correlation, LLM-assisted investigation and agentic auto-triage. Version 7.0 adds per-queue AI triage and case metrics. The architecture is multi-tenant, serving MSSPs and MDR providers as well as enterprises in manufacturing, government, education and finance.

• Next-gen SIEM: Collects and normalizes logs from any vendor for correlation and search.
• NDR and OT sensors: Detect threats in network and industrial traffic.
• ITDR and UEBA: Spot identity abuse and abnormal user or entity behavior.
• Agentic auto triage: AI groups alerts into cases and prioritizes them per queue.
• Automated response: Triggers actions in tools such as Microsoft Defender, FortiGate and Cybereason.
• Case metrics: Measures acknowledgment and resolution times to track SOC service levels.

A Vietnamese MSSP or telecom operator can run a multi-tenant SOC-as-a-service for SME clients on one platform. A manufacturer can add NDR and OT sensors to monitor factory networks alongside IT logs. A mid-sized bank can consolidate SIEM and UEBA and use AI triage to cut alert fatigue for a small security team.

The company reports analyst productivity gains of more than 80% and false positive reductions of over 90%. One license replaces several separate SIEM, NDR and UEBA tools, which lowers cost and integration effort for mid-sized teams. Existing EDR and firewall investments are kept because the platform works with any vendor. MSSPs can run many customers from one multi-tenant console.

Mid-sized organizations face more attacks while security analysts remain scarce, so demand is shifting toward consolidated, AI-assisted SOC platforms and outsourced SOC-as-a-service. In Vietnam and Southeast Asia, MSSPs and telecom operators are expanding managed SOC offerings to serve banks, manufacturers and public agencies that must meet tightening cybersecurity and data protection rules.

Founded in 2015 by CTO Aimei Wei; CEO and co-founder Changming Liu. Headquartered at 2590 N First St, San Jose, California. Reports about 15,000 organizations in more than 50 countries and one-third of the world's top 250 MSSPs as users. Listed in the 2026 Gartner Magic Quadrant for NDR and Hype Cycle for Security Operations 2026.