Exaforce Agentic SOC Platform and MDR

Exaforce Inc. is a security operations company headquartered in the San Francisco Bay Area, United States, led by CEO Ankur Singla and employing over 130 people. It addresses the cost and noise of traditional SOC stacks, where SIEM queries, false positives and analyst shortages slow down investigation and response.

The platform combines a data platform positioned as a SIEM replacement, a real-time security knowledge graph, multi-model AI and four AI agents called Exabots that detect, triage, investigate and respond, plus natural-language threat hunting. It ingests data from over 100 sources across cloud, identity, endpoint and SaaS, and recently added agentless security for AI agents and models. Customers can run it themselves or buy Exaforce MDR, where analysts and Exabots act as a 24×7 SOC. Customers include NTT Data, KDDI, Replit and Guardant Health.

• Exabots: Four AI agents that detect, triage, investigate and respond to threats.
• Data platform: AI-native alternative to a traditional SIEM, backed by a real-time knowledge graph.
• Natural-language hunting: Investigates threats without writing complex SIEM queries.
• Exaforce MDR: Analysts and Exabots provide 24x7 managed SOC coverage.
• AI security: Scores AI agent activity against the identity behind it and responds autonomously or with approval.
• Broad ingestion: Over 100 sources including AWS, Google Cloud, Okta, Entra ID, CrowdStrike and GitHub.

A Vietnamese fintech running on AWS can replace its SIEM and outsource 24x7 monitoring to Exaforce MDR. A SaaS company can investigate suspicious Okta or GitHub activity through natural-language questions. An enterprise deploying AI agents internally can monitor their behavior against the identities that run them.

Exaforce reports a 90% reduction in false positives, a 95% reduction in mean time to investigate and under 30 minutes on average from alert to response. It cites average savings of more than 600,000 USD compared with traditional SOC stacks. Organizations can start self-managed and add 24x7 MDR coverage within days without changing platforms.

Organizations are rethinking costly SIEM-centric SOCs in favor of AI-native platforms that combine data, detection and investigation, often paired with managed services. Cloud-first companies in Southeast Asia and Vietnam, including fintechs and SaaS firms on AWS and Google Cloud, face identity and cloud attacks that require round-the-clock coverage without large teams.

Headquartered in the San Francisco Bay Area; CEO Ankur Singla. Raised a 75 million USD Series A and a 125 million USD Series B in May 2026, total 200 million USD, with plans to expand in Japan and Europe. Holds AWS Security and AI Competencies. Lists SOC 2 Type 2, ISO 27001, PCI DSS, HIPAA and HITRUST. Named Leader and Outperformer in the 2025 GigaOm Radar for SecOps Automation.