Macnica launches "Prophet AI," Japan's first AI-powered next-generation SOC platform – enabling more efficient and sophisticated SOC operations through automation of initial investigations and visualization of decision-making criteria.

Macnica (Headquarters: Yokohama City, Kanagawa Prefecture, Representative Director and President: Kazumasa Hara, hereinafter referred to as Macnica) announced today that it has entered into an agency agreement with Prophet Security, Inc. (Headquarters: California, USA, CEO: Kamal Shah, hereinafter referred to as Prophet Security) and will begin offering the "Prophet Agentic AI SOC Platform (hereinafter referred to as Prophet AI)," the first AI-powered next-generation SOC platform in Japan.

■ Challenges in security operations
As cyberattacks become more sophisticated and complex, companies are facing increasing challenges such as expanding the scope of monitoring and raising the volume of alerts, leading to increased operational burden and a shortage of security personnel. In particular, the operation of Security Operations Centers (SOCs) is seeing increased workload for daily alert processing and initial investigations, as well as variations in judgment quality due to differences in the experience of personnel. Furthermore, companies that rely on outsourcing struggle to accumulate in-house investigative knowledge, making continuous improvement of operational quality and rapid decision-making difficult. For these reasons, companies are focusing on using AI to ensure security operations that guarantee speed and quality even with limited personnel.

■ Prophet AI
Prophet AI is a platform that streamlines the tasks involved in detecting, investigating, and responding to security threats, and supports the advancement of SOCs (Security Operations Centers).
It integrates with existing security infrastructure such as EDR, SIEM, identity management, cloud, network, and email to streamline initial response to alerts. By consistently executing the entire incident response process, from investigation planning and evidence gathering to alert prioritization and response proposals, it enables rapid and stable security operations.

A major strength of this system is that it incorporates Agentic AI, specifically designed for SOC operations, developed by experts with many years of experience in SOC operations, based on real-world operational practices and challenges. Furthermore, it offers high transparency, allowing humans to track and verify "what investigations were conducted and why those decisions were reached." Its open design, independent of specific security products, also helps avoid vendor lock-in.
In addition, the system employs an integrated architecture where each function works in conjunction, from alert triage to threat hunting and detection logic improvement. This means that information obtained from detection is used to improve investigation accuracy, and investigation results are used to improve detection accuracy and reduce unnecessary alerts. Furthermore, insights gained from threat hunting lead to new detections, enabling a continuous improvement cycle through operation.

This system allows the knowledge accumulated through daily operations to be utilized as an asset for the entire organization, ensuring the continuous transfer of expertise even when personnel changes occur. Furthermore, the accumulated knowledge is optimized to suit each customer's environment, so the operational value increases with continued use, contributing to the realization of more advanced and efficient security operations.

<How Prophet AI works>

<Prophet AI Product Features>
1. Automation of initial investigation and triage using SOC-specific Agentic AI.
This system features Agentic AI, a SOC-specific AI developed by experts with many years of experience in SOC operations, based on real-world operational practices and challenges. The AI handles everything from summarizing alerts and generating investigation plans to collecting and analyzing relevant data, prioritizing tasks, and suggesting response strategies, allowing SOC analysts to focus on more critical decisions and actions.

2. Visualization of the investigation process and the basis for judgments
The design allows users to verify which information the AI reviewed and the basis for its decisions, providing high transparency that allows humans to track and confirm the process. Therefore, instead of leaving everything to the AI, humans can operate the system while verifying its validity as needed.

3. Integration with existing environments and continuous adaptation
Its open design, independent of specific products, allows for SOC operations that avoid vendor lock-in and integrate with existing environments, such as security products like EDR, SIEM, ID, cloud, and email, as well as case management and collaboration tools.
Furthermore, because it employs an integrated architecture where each function works in conjunction, from alert triage to threat hunting and detection logic improvement, it adapts to each company's environment and policies while incorporating the judgments of SOC analysts and the organization's unique characteristics and preconditions.

4. Proactive Threat Hunting
AI proactively hunts for threats based on hypotheses, quickly verifying the presence or absence of threats in the customer's environment. Through carefully selected hunting templates and continuous monitoring, it can detect potential threats before they manifest as alerts.

5. Continuous improvement of detection accuracy
The AI analyzes existing detection rules and log acquisition status, visualizing overlooked attack methods and noisy detections in light of the MITRE ATT&CK® ^* framework. By specifically suggesting areas for improvement and tuning options, it supports the optimization of detection rules, continuously improving the accuracy and comprehensiveness of detections.

 ■Implementing and utilizing Prophet AI in a way that is tailored to real-world operations
Leveraging the expertise cultivated through handling a diverse range of security products including EDR, SIEM, ID, cloud, email, and threat intelligence, Macnica provides comprehensive support, from PoC and technical verification including the selection of target alerts and data sources, the organization of evaluation criteria, and connection with existing operational flows, to post-implementation adoption and integration with other security products. Furthermore, by promoting the use of Prophet AI tailored to the operational realities of each company, we will contribute to the construction of sustainable security operational systems for Japanese companies and the strengthening of cybersecurity for society as a whole.

* MITRE ATT&CK® is a world-standard knowledge base (framework) that systematically organizes the tactics and techniques of actual cyber attackers.

[Click here for product details]
URL: https://www.macnica.co.jp/business/security/manufacturers/prophetsecurity/

[For product inquiries, please contact us here]
Macnica Prophet Team
Email: prophet@macnica.co.jp

*Company names and product names mentioned in this text are trademarks or registered trademarks of Macnica and each company.
*The information published in the news release (including product price, specifications, etc.) is current as of the date of announcement. Please note that the information may be subject to change without prior notice.