Agentic SOC platform with a cybersecurity-specific model and a passive OT detection line

Spharaka Networks Private Limited, with offices in Hyderabad and Bangalore, builds its security operations products on SAGE, a foundation model the company trained specifically for cybersecurity rather than adapted from a general-purpose one, a choice it argues for in its own published whitepaper. SAGE runs underneath AuraXP, a multi-agent platform, and surfaces in two product lines split by where they operate. Spharaka Sphere handles IT security operations, and Spharaka Signal covers operational technology and industrial control systems. A separate on-premises edition of Sphere runs air-gapped with local inference, for networks that cannot call out.

Sphere's target is mean time to investigate. It correlates events across endpoint, network, cloud and identity, reconstructs the attack timeline, enriches findings with threat intelligence and maps adversary behaviour to MITRE ATT&CK, delivering root cause, affected assets and a recommended response rather than a queue of alerts; the company states this brings investigation from hours to under sixty seconds for supported detections. Containment is executed automatically with human oversight retained on the decisions that warrant it. Signal takes the opposite approach for industrial environments, using passive network analysis only, discovering assets, learning proprietary protocols and detecting operational threats without introducing traffic onto a control network. Capabilities span AI SIEM, SOAR, UEBA, autonomous threat hunting and threat intelligence, delivered through partners across India and the Middle East.