How does Exaforce work an alert?
Exabots handle detection, triage, investigation and response on a unified data layer and knowledge graph, with separate models for data relationships, anomaly detection and reasoning. Exabots triage alerts and escalate only what needs human judgment. Exaforce lists 130+ integrations across IaaS, SaaS, identity, endpoint, SIEM, SOAR, email, ticketing and threat intel.
How much can Exaforce do on its own?
Exabots execute response: isolating cloud instances, quarantining or deleting emails, blocking IPs, disabling endpoints, resetting MFA or passwords, suspending users and revoking sessions across Okta, Entra ID, AWS and email. Actions sit behind approval gates with full audit trails, and users or managers can confirm them in Slack. Named autonomy levels per category, and a way to pull autonomy back, are not described on the pages we read.
What does Exaforce say about itself?
Agentic SOC in which Exabots handle detection, triage, investigation and response on a unified data layer, with a self-managed or Exaforce-managed operating model.
- Operating models
- Self-managed, or managed by Exaforce with analysts and Exabots 24/7.
Source: Exaforce homepage · Read 13 Oct 2026
- Response
- Isolate cloud instances, quarantine or delete emails, block IPs, disable endpoints, reset MFA or passwords, suspend users and revoke sessions across Okta, Entra ID, AWS and email.
Source: Exaforce Exabot Respond · Read 13 Oct 2026
- Guardrails
- Approval gates, full audit trails and Slack confirmations.
Source: Exaforce Exabot Respond · Read 13 Oct 2026
- SOAR position
- "Go beyond rigid SOAR playbooks"; a visual editor mixes deterministic and agentic steps.
Source: Exaforce Exabot Respond · Read 13 Oct 2026
- Data
- Use cases listed include SIEM replacement and replacing legacy MDR or MSSP.
Source: Exaforce homepage · Read 13 Oct 2026
- Company
- $75M Series A (April 2025) and $125M Series B (May 2026).
Source: Exaforce newsroom · Read 13 Oct 2026
Which figures does Exaforce claim?
What does Exaforce cost, and how is it hosted?
Exaforce has no pricing page. Its AWS Marketplace listing shows an Agentic SOC Starter Pack at $75,000 per 12-month contract; what the pack covers is not defined. Exaforce stores and normalises raw data in its own data layer; tenancy, key control, residency and attestations are not described on the pages reviewed. It can be self-managed or managed by Exaforce, with analysts and Exabots working 24/7.
PRICING Not published
No pricing page. AWS Marketplace lists an Agentic SOC Starter Pack at $75,000 per 12-month contract; the unit is not defined.
Source: AWS Marketplace: Exaforce Agentic SOC Starter Pack · Read 13 Oct 2026
HOSTING SaaS. Stores and normalises raw data in its own data layer. Tenancy, key control, residency and attestations: Not published on the pages reviewed.
INTEGRATIONS 130+ integrations across IaaS, SaaS, identity, endpoint, SIEM, SOAR, email, ticketing, threat intel and AI.
Where is it strong, and what should you check?
Strengths
- Native response across endpoint, identity, cloud, SaaS and email behind approval gates.
- A choice of running it yourself or having Exaforce run it.
Check before you buy
- How verdict reasoning is shown is not described.
- No hosting, residency or attestation details published.
- The marketplace price covers a starter pack whose unit is not defined.
Who should choose Exaforce?
Choose Exaforce if you want native response across cloud, identity and email behind approval gates, or want the option of having Exaforce run the platform for you. Look elsewhere first if you need to see how each verdict was reached, or need published hosting and attestation details.