Listen to this article
Legion emerges from stealth with $38 million in funding to launch the first browser-based AI SOC platform that learns and automates security analyst workflows. The system requires no integrations or playbooks and is already in use by Fortune 500 companies across critical sectors. Backed by investors like Coatue and Accel, Legion aims to reduce alert fatigue and scale in-house expertise through adaptive, human-trained automation.
Security Chaos Meets Its Match
Security operations centers (SOCs) face a consistent operational strain caused by escalating threat volumes and limited personnel. Industry reports show that most security teams operate with 26% to 45% fewer staff than necessary. Nearly 72% of analysts spend the majority of their time sorting through alert noise, investigating false positives, and documenting cases. These inefficiencies contribute to skill erosion, frustration, and burnout across security teams.
Traditional AI-driven SOC platforms have not solved this. They often depend on complex integrations, rigid playbooks, and static architectures that are not adaptable to each organization’s unique environment. The result is limited trust and limited usability among enterprise teams.
Inside Legion’s $38M Power Move
Legion has announced a total of $38 million in combined seed and Series A funding. The Series A was led by Coatue, while the seed round was co-led by Accel and Picture Capital. The company also attracted angel investors from major tech companies such as Google, CrowdStrike, and Wiz. Legion made its public debut this week, emerging from stealth mode with a focus on redefining how security operations are handled using AI.
A SOC That Learns Like a Human
Legion introduces a browser-native AI companion that operates without requiring APIs, playbooks, or custom integrations. The platform installs as a lightweight browser extension and is trained entirely within the user’s environment.
The system observes how analysts investigate alerts, capturing both routine and complex workflows. By learning from actual behavior, Legion builds scalable automation modeled on real decision-making processes. The AI assists teams by surfacing optimized workflows, suggesting improvements, and executing responses autonomously or under human supervision.
This design enables deployment in minutes and supports any browser-accessible platform, including:
- SIEMs
- Threat intelligence platforms
- Email security systems
- Custom internal tools
Goodbye Playbooks, Hello Autonomy
Unlike platforms that rely on pre-defined automation rules, Legion adapts to its environment by learning from internal team actions. According to Ely Abramovitch, “Legion is the first browser-based platform designed to scale your team’s best instincts into AI-driven workflows.”
It allows teams to choose between human-in-the-loop operation or full automation. Because it doesn’t depend on traditional integration models, teams maintain control and visibility while scaling their operations on their own terms.
The platform’s ability to investigate and respond to threats 24/7—using only tools already in place—provides a significant advantage for overextended security teams.
Recommended: Alix Raises $20M To Simplify Estate Settlement With AI-Powered Wealth Transfer Platform
Fortune 500s Already Buy In
Legion’s technology is already deployed by enterprises in finance, energy, and healthcare sectors. Organizations report up to a 90% reduction in investigation and response times.
Some enterprises have used Legion to bring all SOC operations in-house, eliminating the need for external contractors. Others report achieving the capacity equivalent of nine full-time analysts without adding headcount.
These results underline the platform’s potential to scale operations and reduce dependency on hiring during ongoing cybersecurity talent shortages.
Security Work Reimagined from the Inside Out
The founding team’s background in building Microsoft Sentinel and AI systems in both industry and academia informed the design of the Legion platform. They identified core issues within SOCs, including tool sprawl, procedural complexity, and workforce exhaustion.
Legion addresses these challenges by creating AI companions that think like seasoned analysts. Rather than replacing human analysts, the system captures their insights and applies them consistently across teams.
This model enables organizations to scale intelligence—not just tools—across all levels of their security workflows.
Why Legion’s Timing Couldn’t Be Better
With alert volumes increasing and hiring challenges persisting, many security teams are seeking solutions that align with their actual workflows. Legion’s browser-based AI SOC platform provides an alternative that learns from real human expertise and scales it efficiently.
By eliminating the need for predefined playbooks, removing integration barriers, and offering deployment in minutes, Legion positions itself as a functional and immediate option for enterprise teams already under pressure.
Its $38 million in backing, adoption by global enterprises, and practical automation model signal a strong response to long-standing operational pain points in cybersecurity.
Please email us your feedback and news tips at hello(at)dailycompanynews.com
