Dropzone AI SOC Analyst (Agentic SOC)

Dropzone AI is a Seattle-based startup founded in 2022 by CEO Edward Wu. It tackles alert overload in security operations centers, where lean teams cannot investigate every alert from SIEM, EDR, cloud and identity tools, so real attacks slip through or analysts burn out.

Its AI SOC Analyst is a set of autonomous agents that connect to existing tools through APIs, without moving or normalizing data, and investigate phishing, endpoint, network, cloud, identity and insider-threat alerts end to end around the clock. Each verdict comes with the evidence gathered, and teams define the strategies the agents follow. An AI Threat Hunter runs hunts across logs, and an AI Threat Intel Analyst is planned. The platform serves enterprises and MSSPs, with more than 300 organizations in production.

• Autonomous alert investigation: Agents investigate every alert end to end, 24/7.
• Evidence-backed verdicts: Each conclusion shows the queries and data behind it.
• Custom strategies: Teams set priorities, methods and what normal looks like.
• AI Threat Hunter: Runs hunt packs across large log volumes in hours.
• No data lift: Queries existing tools via API without moving data.
• 90+ integrations: Connects to Splunk, Microsoft Sentinel, CrowdStrike, SentinelOne, Okta and more.

A Vietnamese bank with a small SOC can let AI agents investigate overnight alerts from Microsoft Sentinel and its EDR. A local MSSP can raise the number of clients each analyst covers. A fintech or e-commerce company can automate phishing report investigations from employees.

The company reports 85% less manual alert investigation time and five times faster mean time to respond. A lean team gains coverage it equates to more than five additional analysts. Threat hunts that took about 40 hours can be cut to about one hour. Existing SIEM and EDR investments are kept because the agents work through more than 90 integrations.

Agentic AI is moving into security operations as alert volumes grow faster than analyst headcount. Mid-sized enterprises and MSSPs are adopting AI SOC analysts to cover nights and weekends without adding staff. In Vietnam and Southeast Asia, where experienced SOC analysts are scarce and banks and listed companies face stricter monitoring requirements, AI-assisted triage can stretch small teams.

Founded in 2022 by Edward Wu; press releases are datelined Seattle. Raised $57.4M in total, including a $37M Series B closed in 2025; investors include Theory Ventures, Decibel, Madrona and IQT. Reported 11x ARR growth in 2025 and more than 300 organizations in production. Sells channel-only through the Dropzone AI Orbit partner program.