Annual subscription starting at $36,000/year per AI SOC Analyst, which includes up to 4,000 investigations per year, unlimited users, 80+ integrations, and threat intelligence. Enterprise and MSSP custom pricing available.
Free. The code is on GitHub under Apache 2.0. A future hosted team office feature will be paid.
Key features
Alert investigation across SIEM, EDR, cloud, and identity tools
Autonomous threat hunting with hypothesis-driven searches
Integration with 90+ security tools via API
24/7 continuous security operations
Threat intelligence feeds and enrichment
Decision-ready investigation reports with evidence
Custom workflow configuration for enterprise organizations
Multiple hunt types including emerging threats and ATT&CK techniques
EU data residency option
Multi-agent monitoring from a single screen
Real-time status visualization with color-coded states
Tool approval and command authorization
Team workflows with task handoffs
In-conversation steering without window switching
System notifications for approval requests
Local-only architecture with no data leaving machine
Auto-deny protection for undecided requests
Integration with existing Claude subscription
What makes it different
5x faster mean time to response (MTTR)
85% reduction in manual alert investigation effort
Maintains continuous 24/7 SOC coverage without team scaling
Transparent, auditable AI investigations with glass-box reasoning
Operates in closed loop with multiple AI agents without human prompting
Complete local-first privacy: code and transcripts never leave your machine
No configuration or learning curve: read a room and you can run it
Works with your existing Claude Code installation and subscription
Open source under Apache 2.0 with no account required
Dropzone AI
airoom