Legion Raises $38M to Revolutionize AI Security Operations - InforCapital

New York-based Legion, the first AI-driven Security Operations Center (SOC) automation platform, has announced its emergence from stealth with a remarkable $38M in seed and series A funding. The financing round saw significant participation from prominent investors including Coatue, Accel, and Picture Capital, who were co-leads in the previous seed round. In addition, angel investors from leading technology firms such as Google, Crowdstrike, and Wiz also backed the enterprise.

Legion's groundbreaking browser extension AI SOC companion has been designed to turn in-house security expertise into scalable automation. The platform observes your team's investigations, learns their patterns, and then automates them at any scale, without the need for any integrations or APIs.

Security teams have been struggling with more alerts than they can efficiently investigate for over two decades, often operating with 26-45% fewer staff than required. A recent survey revealed that about 71.6% of researchers and analysts spend the majority of their time triaging alerts, filtering false positives, and documenting cases, rather than deepening their expertise. This trend causes frustration and leads to burnout over time.

Legion, however, aims to resolve these issues. "Legion is the first browser-based platform designed to scale your team's best instincts into AI-driven workflows. It's fully trained within your environment, by your team, for your team. Our goal is to turn your expertise into scalable automation, letting the security team focus on what's really important," said Ely Abramovitch, co-founder and CEO of Legion.

Founded in 2024 by security veterans Ely Abramovitch (CEO), Michael Gladishev (VP R&D), and Eyal Fisher (CTO), Legion uses vision models and a lightweight browser extension to record analyst workflows. The platform then shows teams the workflows it learned and helps optimize them. With the user's permission, Legion investigates and responds to threats 24/7 using existing tools, either with human-in-the-loop or completely autonomously. It scales your team's expertise without adding headcount. Legion works with any browser-accessible platform, including SIEMs, threat intel tools, email platforms, and internal, homegrown systems.

Legion is already in operation within Fortune 500 enterprises across multiple sectors including finance, healthcare, and energy. Customers have already reported up to a 90% reduction in investigation and response times. Some clients have fully integrated their SOC with Legion, eliminating the need for external headcount. In other cases, Legion's automation has delivered the equivalent capacity of nine additional analysts, without any new hiring.

About Legion: Legion seeks to transform how security work is done, starting with the security operation center (SOC). Legion's approach addresses challenges by creating AI SOC Analysts that understand and reason like their human counterparts. For more information, contact us at www.legionsecurity.ai.