Autonomous security operations platform that runs detection, triage, investigation, and response with agents

Alaris Security was founded in 2024 and is based in San Francisco with additional offices in Berlin and Dubai. Rather than adding an assistant alongside the analyst queue, the platform aims at the whole operational loop, structured as six stages. Detection engineering comes first, where rule agents convert a natural-language description of adversary behavior into a detection and backtest it against historical telemetry before it goes live, which addresses the usual bottleneck of content authoring. Triage follows: the company states that its agents close between 95 and 98 percent of alerts without an analyst opening them.

What survives triage goes to investigation, handled by teams of agents that pull supporting evidence from the connected estate, reach a verified conclusion, and propose remediation rather than handing the analyst a bundle of context. Separate hunting agents work ahead of the alert queue, pursuing hypotheses before a detection fires, and containment coordinates action across endpoint, identity, email, cloud, and network controls as a single response rather than a sequence of console visits. Compliance reporting closes the loop, generating incident documentation mapped to several frameworks. Telemetry is ingested from more than 50 security tools spanning SIEM, EDR, cloud platforms, identity providers, and email gateways. Alaris sells to enterprises, government agencies, and MSSPs, and offers discounted access to venture-backed startups.