# Legion Security

> Legion Security sells enterprise software that learns how a security operations team investigates alerts through a browser extension, turns that work into inspectable workflows, and gradually automates repeatable investigations. Founded in 2024 by former Microsoft Sentinel leaders and an AI researcher, the company has raised $38 million and works with customers including Virgin Money, WELL Health Technologies and the University of Tulsa.

- **Founded:** 2024
- **Headquarters:** New York, United States
- **Founders:** Ely Abramovitch (Co-founder and CEO), Eyal Fisher (Co-founder and CTO), Michael Gladishev (Co-founder and VP R&D)
- **Products:** Agentic Security Operations Platform, Learning Mode, Guided Mode, Autonomous Mode, Legion AI Investigator
- **Notable:** Raised $38 million in seed and Series A funding by July 2025., Legion says Virgin Money reduced an approximately 50,000-alert backlog to about 20,000 in under two months., Legion reports an 81% reduction in investigation or response time for WELL Health Technologies use cases.

## Products & services

- **Agentic Security Operations Platform** — Browser-native enterprise platform that captures analyst activity and organizational context, creates workflows, and runs investigations across existing tools.
- **Learning Mode** — Observes analyst investigations and maps steps, tools and decisions into editable workflows.
- **Guided Mode** — Executes workflows in analysts' browsers with human review and correction.
- **Autonomous Mode** — Runs approved investigation workflows and escalates when human input is needed.
- **Legion AI Investigator** — Goal-oriented agent for open-ended investigations where fixed playbooks are insufficient.
- **DragonClaw** — Orchestration layer that invokes agents and answers questions using a customer's own cases, workflows and tools.

## Achievements

- Raised $38 million in seed and Series A funding by July 2025.
- Legion says Virgin Money reduced an approximately 50,000-alert backlog to about 20,000 in under two months.
- Legion reports an 81% reduction in investigation or response time for WELL Health Technologies use cases.
- Listed on Google Cloud Marketplace in 2026.
- Became an Optiv Authorized Partner in June 2026.

## Latest updates

- **2026-09** — Published a practical guide to SOC automation and why projects stall.
- **2026-08** — Published Virgin Money customer testimonial and backlog case study.
- **2026-07** — Introduced DragonClaw agent orchestration layer.
- **2026-06** — Announced Optiv partnership and Google Cloud Marketplace availability.
- **2026-03** — Introduced Legion AI Investigator for open-ended cases.

## Links

- Website: https://www.legionsecurity.ai/
- LinkedIn: https://www.linkedin.com/company/legion-security-ai/
- Twitter/X: https://x.com/LegionSecAI

---

Profile page: https://yespress.io/legion-security
Published by YesPress — https://yespress.io
Last updated: 2026-09-29
