Morpheus Autonomous AI SOC Platform for MSSPs

D3 Security Management Systems Inc. is a security automation company based in Vancouver, British Columbia, Canada. Its founder and president Gordon Benoit built its first incident response automation solution in 2015. It addresses the alert overload and thin margins that SOC teams, MSSPs and MDR providers face when every alert needs human triage.

Morpheus, generally available since August 2025, is an agentic SOC platform that autonomously investigates L1 and L2 alerts, traces lateral movement and privilege escalation, grades findings as confirmed, inferred or gap, and executes response through deterministic playbooks with approval gates, without a separate SOAR. For MSSPs it provides isolated tenants, per-tenant autonomy modes, white-label client portals and 800+ integrations with self-healing connectors. It runs on Azure with residency in the US, Canada, Ireland and Japan, or on-premises, hybrid and air-gapped.

• Autonomous investigation: Investigates L1 and L2 alerts and traces attack paths across environments.
• Evidence grading: Labels findings as confirmed, inferred or gap with source telemetry attached.
• Autonomy modes: Deterministic, AI-assisted, AI-led or autonomous, set per tenant and alert type.
• Multi-tenant isolation: Separate data, credentials, playbooks and audit trails per client, with white-label portals.
• Self-healing integrations: 800+ connectors that repair themselves when vendor APIs change.
• Flexible residency: Azure regions in the US, Canada, Ireland and Japan, or on-premises and air-gapped.

A Vietnamese MSSP can run isolated tenants for dozens of SME and bank clients, with different autonomy levels per client. A bank that must keep data on-premises can deploy Morpheus in an air-gapped environment to automate SOC triage. An enterprise replacing a legacy SOAR can move response playbooks into one agentic platform.

D3 reports one MSSP deployment cutting alerts needing human review from 144,000 to 200 per month. It cites gross margins of 70–85% on a Morpheus-augmented SOC versus 35–50% for a human-only SOC, and 3x client capacity on existing headcount at a large master MSSP. Up to 95% of alerts are investigated in under two minutes. Pricing is an annual subscription with AI included and no per-token charges, and new tenants do not add licenses.

MSSPs and MDR providers are replacing linear analyst hiring with AI investigation to protect margins as client numbers grow, and SOAR buyers are moving to agentic platforms that need fewer hand-built playbooks. Southeast Asian MSSPs serving banks and government agencies also need on-premises or in-region deployment options to meet data residency expectations.

Legal entity D3 Security Management Systems Inc., 1075 W Georgia St #300, Vancouver, BC, Canada. Founder and president Gordon Benoit built the first incident response automation solution in 2015. Exhibited Morpheus at Black Hat USA 2026. Release waves since GA added security memory graphs, tenant-scoped learning and self-repairing connectors.