Legion has built an AI-driven, browser-native SOC platform that observes analysts’ workflows, learns their processes, and then automates triage, investigation, and response across any browser-accessible security tool. The system avoids heavy API integrations, installing in minutes as a browser extension that can interact with SIEMs, threat-intel platforms, email tools, and internal systems. When authorised, Legion shifts from passive observation to active remediation, enabling human-in-the-loop or fully automated responses at scale. Early adopters report up to a 90% reduction in investigation and response times, the equivalent productivity gain of adding nine analysts without hiring. Already in use by Fortune 500 companies in finance, healthcare, and energy, Legion positions its AI as a force multiplier rather than a replacement for security talent. The company plans to use new capital to accelerate AI development, grow its global footprint, and scale its engineering and go-to-market teams. Legion’s founding team includes veterans from Microsoft Security, Azure Sentinel, Indegy, and AI startup ART AI, grounding the product in deep domain expertise. No revenue or user counts were disclosed in the article.

Total raised

$38M

Funding rounds

2

Latest round

Seed

Latest activity

Jul 2025