Skip to main content

Legion principles

Vision​

Building the AI SOC Analyst​

Our mission is to create an AI-powered Security Operations Center (SOC) analyst. An intelligent system that handles the repetitive, time-consuming tasks of traditional SOCs: investigating alerts and taking initial containment actions.

Why this matters​

  1. The cybersecurity industry faces a critical shortage of analysts, leaving many alerts uninvestigated.
  2. Repetitive, mundane tasks lead to burnout and high turnover among security professionals.
  3. As attackers adopt offensive AI, alert volumes surge, making rapid containment more essential than ever.

If we succeed, within 5 years every organization will be defended by a Legion of AI analysts working around the clock to detect and contain threats with speed and precision.

Principles​

1. Speed​

Our priority is to deliver our product to customers as quickly as possible in order to gather feedback and iterate based on real world usage. At this stage we prioritize speed and whatever enables it over almost anything else. Being fast allows us to adapt swiftly and stay ahead in meeting customer needs.

2. Customer adaptation​

Legion is designed to integrate seamlessly into the existing processes and tools of our customers. We adapt to our customers’ needs rather than expecting them to conform to ours, ensuring we deliver value while minimizing disruption to their processes.

Practical examples:​
  • Learn customers’ investigation workflows instead of imposing our own
  • Integrate seamlessly with the organization’s tool stack
  • Allow workflow customization to adjust to specific organization requirements

3. Time to value​

The time it takes our customers to derive value from Legion must be as short as possible. All aspects of the product should be optimized to minimize the required effort from our customers.

Practical examples:​
  • Simple installation processes to get up and running quickly
  • Streamlining credential management and setup to avoid unnecessary hurdles

4. Transparency​

Trust is earned through transparency. We are committed to being open about all aspects of Legion, avoiding the pitfalls of being a “black box” AI product. Customers deserve to know exactly how the product works and makes decisions

Practical examples:​
  • Clearly outlining what data we collect and how it’s used
  • Providing visibility into investigation steps, their rationale, and outcomes
  • Explaining how Legion makes decisions, especially what data they are based on

5. World Class Customer Support​

Great customer support is a feature. We aim to provide timely, knowledgeable, and empathetic support to ensure that our customers feel valued and successful. Exceptional support builds trust and reinforces our commitment to our customers' success.

Practical examples:​
  • Rapid response times for customer queries or issues
  • Clear, actionable guidance and troubleshooting
  • Proactive outreach to ensure smooth adoption and usage of Legion
  • Comprehensive self-service resources, such as documentation, tutorials, and FAQs

6. Security​

Our customers entrust us with sensitive data, and we are committed to protecting it with robust security measures and best practices. Legion is built to meet the highest standards of data protection and compliance.