AI-native SOC platform that pre-investigates alerts across connected security and business systems

Port0 was founded in 2024 and is based in Tel Aviv. It raised $11M in seed funding in September 2025, co-led by Venture Guides and Ibex Investors, with participation from IN Venture and Mamram Space. The company's framing of the SOC problem is that the queue itself is the defect: analysts spend their day establishing context that the surrounding tools already hold but do not share. Its answer is to connect to more than 300 sources by API rather than requiring new agents, sensors, or infrastructure changes, and to do the correlation work before a human ever opens the alert.

Connectors span identity providers such as Okta and Microsoft Entra, cloud platforms including AWS and Google Cloud, endpoint and network products from CrowdStrike, Microsoft Defender, SentinelOne, and Palo Alto Networks, data pipelines including Splunk and Elastic, and business applications such as Microsoft 365 and Google Workspace. Signals from those systems are normalized into a layer the platform queries at petabyte scale, and related alerts are joined into one investigation graph instead of arriving as separate tickets. The output is a pre-investigated case with evidence attached, a priority, and response actions the platform can run through the same integrations. The intended users are SOC teams carrying more alert volume than headcount.