Legion
Category: AI in Cybersecurity
Legion is the first browser-native AI SOC (Security Operations Center) platform that learns from and mimics in-house analyst workflows to automate security operations. Legion was founded in 2024. The company is led by Ely Abramovitch. Based in Tel Aviv, Israel. Team size: 11-50. Total funding raised: $38M (Seed + Series A, July 2025). Latest round: Series A. Key investors include Accel, Coatue, Picture Capital, Angel investors from Google, Angel investors from CrowdStrike, Angel investors from Wiz.
- Founded
- 2024
- Headquarters
- Tel Aviv, Israel
- Team size
- 11-50
- Total funding
- $38M (Seed + Series A, July 2025)
Value proposition
To scale the expertise of a company's best security analysts by learning their unique workflows and automating them, which significantly cuts down investigation and response times without requiring complex integrations or rigid playbooks.
Products and solutions
Browser-Native AI SOC Analyst Platform, DragonClaw — conversational agent orchestration layer for SOC investigations and approved security actions
Unique value
Its core innovation is the browser-native approach. The AI agent observes analysts' investigation techniques and workflows directly within their browser, allowing it to learn and replicate their specific methods without needing traditional, complex API integrations or predefined automation playbooks.
Target customer
Enterprise Security Operations Center (SOC) teams and security analysts, including Fortune 500 companies.
Industries served
Cybersecurity, Enterprise Technology, Finance
Technology advantage
The platform's advantage lies in its ability to create customized, scalable automation based on the actual operating rhythm of a security team. It empowers analysts by amplifying their skills rather than replacing them, leading to a claimed 90% reduction in investigation and response times.
How they differentiate
Legion Security differentiates itself by being the first browser-native AI SOC Analyst. Their platform learns from the security team's actual workflows and scales that knowledge across the organization, automating and augmenting the capabilities of security analysts directly within their browser.
Main competitors
SentinelOne, CrowdStrike, Other AI-powered SOC platforms
Key partnerships
Optiv — Authorized Partner, Google Cloud — Gemini models, cloud infrastructure and Marketplace collaboration, OpenAI Daybreak Blue — approved defensive cybersecurity access
Notable customers
Virgin Money, IQ-EQ, WELL Health Technologies, The University of Tulsa
Major milestones
Emerged from stealth on July 30, 2025., Secured a combined $38 million in Seed and Series A funding.
Growth metrics
Public customer outcome metrics are available: WELL Health Technologies reported an 81% reduction in investigation times, and the University of Tulsa reported investigation times cut in half. Revenue and customer-count growth remain undisclosed.
Market positioning
Legion is positioning itself as an innovator in the Security Operations Center (SOC) market. They are targeting the need for more efficient and scalable threat detection and response by using AI to automate the manual and repetitive tasks of security analysts.
Geographic focus
The company is headquartered in Tel Aviv, Israel, with a strong focus on the US market, as indicated by its key investors.
Patents and IP
Information not publicly available.
About Ely Abramovitch
Previously led product management at Microsoft (Principal PM Manager) building Microsoft Sentinel.
More AI in Cybersecurity companies
Official website: https://www.legionsecurity.ai