Threat-led AI SOC that hunts, builds detections, and simulates attacks against your stack

Most AI-for-the-SOC products start at the alert and work forward. Elezar starts at the adversary and works backward. A customer configures a threat profile describing which actors, sectors, and techniques matter to them, and Sol uses that as the standing brief for a continuous loop: form a hunting hypothesis, test it against the data in the connected SIEM, EDR, and cloud sources, write detection logic where coverage is missing, then run an attack simulation to confirm the detection actually triggers. Where it does not, Sol identifies the gap and proposes mitigation. Findings and recommended actions go to an analyst, who stays the decision point rather than a reviewer of finished automation.

The design targets two audiences. MSSPs use it to offer threat-led hunting and detection engineering across a customer base without hiring a dedicated researcher per account, and internal SOC teams use it to run the proactive half of their programme, the part that normally gets deferred because the alert queue takes the whole week. Current integrations cover SIEM, EDR, GitHub, and Slack, with further connectors for cloud and case management listed as in progress. Elezar was founded by Jorell Magtibay, who leads the company as CEO, and CTO Hiep Doan, whose backgrounds are in threat intelligence and in building data and software systems at scale. The company is early-stage and several platform features are still marked as forthcoming.