Â鶹¹û¶³

Company FAQ

FAQ

How it Works

General

How is Â鶹¹û¶³ different from an MSSP, MSP, Managed SIEM or Managed EDR?

Â鶹¹û¶³ offers security operations solutions. Unlike other vendors, who focus on delivering and managing a security tool for their customers, Â鶹¹û¶³ solutions deliver actionable security operations outcomes, whether that¡¯s 24×7 alerting, targeted remediation, or strategic guidance. We¡¯re there for every step of your security journey.

Why should I consider using Â鶹¹û¶³ over other security point products and managed services?

The cybersecurity industry has spent decades developing generation after generation of increasingly sophisticated and more powerful point products, and IT teams have worked equally hard to acquire, adopt, and implement those tools. But the scope of cybercrime continues to grow. When we look at major breaches and cybersecurity incidents, we typically observe that the businesses had sufficient tools in place to prevent or detect the breach¡ªbut attacks happened anyway. Why does that happen? It¡¯s because the gap in cybersecurity today is not a tools problem, it¡¯s an operational gap, and Â鶹¹û¶³ is the market leader in security operations.

Â鶹¹û¶³ Aurora? Superintelligence Platform

What makes Â鶹¹û¶³¡¯s platform Superintelligent?

We use the term Superintelligent very deliberately. In cybersecurity, we believe it means delivering outcomes that outperform both human-only and AI-only approaches across key security operations tasks, while doing so in a way customers can trust. The Aurora Superintelligence Platform is designed to do both, combining AI-led speed and scale with human expertise, guardrails, and validation built in.

What AI features does your platform have?

Aurora AI is the set of AI capabilities built into the Aurora Superintelligence Platform. These capabilities include agentic AI, generative AI, fine-tuned security models, machine learning, and customer-specific context to improve security outcomes.

What governance, guardrails and safety measures and policies are in place?

Â鶹¹û¶³ builds governance directly into the platform through the AI Trust Engine. It applies controls across testing, permissions, monitoring, logging, explainability, rollback, and human approval for high-impact actions. It is designed to support deterministic agents, bounded autonomy, and human oversight so AI can operate in a way that is safe, reliable, traceable, and appropriate for real security operations.

Can AI agents access any data or take any action they want?

No. Each AI agent operates within clearly defined boundaries and least-privilege controls. Agents can access only the data, tools, and actions required for their specific function, and those permissions are enforced centrally so they cannot operate outside their intended role. Customer data is also kept logically separated, so if an agent is supporting an investigation for one customer, it cannot inadvertently access or respond with information from another.

Do you train your models on customer data?

Â鶹¹û¶³¡¯s proprietary machine learning models are developed for security operations using security-relevant telemetry, patterns, workflows, and threat signals. Â鶹¹û¶³ does not train its current generative AI functionality on customer data. Where appropriate, relevant customer and security data may be used at the time of invocation to improve the quality and context of outputs.

How many observations does Â鶹¹û¶³ collect each week?

9 trillion, and that number grows weekly.

Can Â鶹¹û¶³ ingest all my log sources?

Â鶹¹û¶³ can ingest any required log source and retain data as needed. Â鶹¹û¶³ parsers allow us to enrich and analyze data from most major security-relevant data sources.

Can Â鶹¹û¶³ monitor endpoints?

Yes. The Â鶹¹û¶³ Agent provides security visibility into endpoint activity. Â鶹¹û¶³ can also integrate with existing endpoint security tools, using them to monitor endpoints as well.

Does Â鶹¹û¶³ have visibility into indicators of lateral movement?

Yes. The Â鶹¹û¶³ Agent provides visibility into indicators of lateral movement.

How does Â鶹¹û¶³ store data?

Â鶹¹û¶³ stores data in our scalable cloud-based data lake for analysis, compliance, reporting, and retention.

Â鶹¹û¶³ Aurora? Agentic SOC

How is your approach to the Agentic SOC different from others in the market?

The Aurora Agentic SOC is different because it is a turnkey, AI-led security operations model built into the service, not added on top of an old one. Agents lead a growing share of core SOC, while humans remain in and on the loop for judgment, accountability, and higher-impact decisions. That gives customers the benefits of agentic AI without asking them to build, orchestrate, or manage their own AI-driven SOC.

What jobs within the SOC are now agent-led?

AI agents in the Aurora Agentic SOC lead a growing set of workflows across the entire SOC. In practice, that means AI can take on more repetitive analysis, coordination, and enrichment work, while humans remain engaged for oversight, validation, and complex decisions.

Does this replace the Concierge Security Team or change how customers work with Â鶹¹û¶³?

No. The Concierge Security Team is not being replaced. It is being enhanced. AI helps take on more repetitive work such as triage, enrichment, summarization, and ticket preparation, which can improve speed and investigation quality. That allows Â鶹¹û¶³ and customer teams to spend more time on higher-value security work.

How far will the agentic workflows go? Will they do remediation?

Agents can support response actions within clearly defined boundaries. For high-impact, irreversible, or low-confidence actions, humans stay in the loop and approval remains in place. That is how Â鶹¹û¶³ balances speed with trust.

Does Aurora AI operate without human oversight?

No. Aurora AI can operate autonomously within defined boundaries, but humans stay in the loop where it matters most. Irreversible, high-impact, or low-confidence actions require human approval, and customer-facing escalations currently do as well.

Concierge Security Team

What do your Concierge Security Teams do?

Most Â鶹¹û¶³ customers are assigned to a Concierge Security Team, which is a dedicated team of named security operations experts. Your Concierge Security Team is your point of contact for all your Â鶹¹û¶³ solutions. They are responsible for alert triage, risk and patching prioritization, remediation support, standard and custom reporting, compliance activities, security recommendations, and strategic guidance along your entire security journey.

How does the Concierge Security Team help my organization respond to threats?

With your Concierge Security Team, you¡¯ll customize your Â鶹¹û¶³ security operations solution(s)¡ªhelping identify the key risks to your organization and establishing a vigilant security posture.? When a threat is identified, the Â鶹¹û¶³ Security Services Team will contact your organization within minutes and execute your response strategy¡ªwhich can include both targeted remediation guidance and containment activities.

Can I create custom rules for alerts and issue escalation?

You¡¯ll work with your Concierge Security Team to define custom rules and workflows to ensure you avoid false positives, detect crucial risks and threats, and respond in ways that best protect your business.

Do I receive a named Concierge Security Team regardless of which solution I use?

The majority of Â鶹¹û¶³ customers work with the Concierge Security Team but not all customers. There are certain Endpoint Security customers that will not have Concierge in a technology only sale.

Working With Â鶹¹û¶³

How does Â鶹¹û¶³ determine pricing?

All Â鶹¹û¶³ solutions have simple, predictable pricing based on consistent inputs such as users, servers, and network egress points.

How much money can I save with Â鶹¹û¶³ over a DIY security strategy?

It depends on which security operations challenges you are facing, but typical organizations have experienced an ROI of 411% from adopting Â鶹¹û¶³ security operations solutions. To understand more about your organization¡¯s potential savings, check out our ROI Calculator.

Can Â鶹¹û¶³ help me meet my compliance obligations?

Yes. Â鶹¹û¶³¡¯s security solutions provide key capabilities required under many compliance frameworks (such as PCI, HIPAA, or NIST). Â鶹¹û¶³ Concierge Security Teams will provide standard and custom support and additional work to support audit and compliance reporting.

How many customers does Â鶹¹û¶³ Work with?

Â鶹¹û¶³ is providing security operations to thousands of customers of all sizes across a wide variety of industries and geographies.

Does Â鶹¹û¶³ work with other customers in my industry or enterprises with a similar number of employees?

Yes, almost certainly. Â鶹¹û¶³ works with customers across all major industries, including financial, healthcare, legal, government, manufacturing, retail, and more. Check out our case study page to see some examples of businesses where we¡¯ve delivered security operations success. If you don¡¯t see your industry or scale represented there, please reach out, and we¡¯d be happy to provide more information on what we¡¯ve done to secure businesses like yours.

Can I co-manage my security operations with Â鶹¹û¶³?

Â鶹¹û¶³ provides security operations solutions, not co-management. All our solutions are delivered through our proprietary cloud-based platform and managed by our Concierge Security Teams, in consultation with our customers. However, customers have access to the solutions through our portals, reports, log search tools, and more.

How long does it take to receive coverage?

It depends on the Â鶹¹û¶³ solution and the customer¡¯s timeline and priorities. Some security solutions can be made available in minutes or hours. Rapid deployment of other solutions can be completed within a week, if necessary, or can occur over a longer timeline. If you are responding to an active security threat or incident, please contact us immediately to understand how soon Â鶹¹û¶³ security operations can protect your business.

Managed Detection and Response

What is Managed Detection and Response?

Â鶹¹û¶³ Managed Detection and Response features 24×7 monitoring of your networks, endpoints, and cloud environments, along with a managed approach to detection, response, and recovery from modern cyber threats through managed triage and concierge services. Learn more.

Aurora Vulnerability Management

What is Aurora Vulnerability Management?

Aurora VM empowers organizations to discover their assets and vulnerabilities, prioritize smarter with real-world threat context, and close the loop faster with automated patch management and AI-powered remediation guidance.
Learn more.

Aurora Attack Surface Management

What is Aurora Attack Surface Management?

Aurora Attack Surface Management provides continuous asset and exposure visibility so teams can uncover blind spots, validate coverage, prioritize business risks, and verify remediation across the entire attack surface.

Cloud Detection and Response

What is Cloud Detection and Response?

The Â鶹¹û¶³ Cloud Detection and Response solution provides 24×7 monitoring of your Infrastructure as a Service (IaaS) and Software as a Service platforms, providing awareness of your risks, misconfigurations, and threats across your cloud environments. Learn more.

Aurora Security Awareness and Training

What is Aurora Security Awareness and Training?

Aurora Security Awareness and; Training minimizes human risk with 100% relevant microlearning sessions that employees will actually pay attention to. Employees receive curated as well as customized training and phishing simulations, enhancing their ability to identify threats and eliminate malicious clicks. Learn more.