Legion, a browser-native AI Security Operations Center (SOC) platform, has emerged from stealth mode after securing $38m in seed and Series A funding to expand its mission of transforming how security teams manage cyber threats.
The funding round was led by Coatue, with early-stage backing from Accel and Picture Capital, who co-led the company’s seed round. The raise also attracted angel investors from leading tech firms including Google, Crowdstrike, and Wiz.
Founded in 2024, Legion offers a first-of-its-kind browser extension that enables organisations to scale their in-house security expertise into automated workflows. The platform learns directly from security teams’ investigation techniques, streamlining how they respond to threats without requiring complex integrations or APIs.
The capital will be used to further develop Legion’s AI-driven SOC platform, expand its engineering team, and support its growing enterprise customer base across sectors such as finance, healthcare, and energy. The company plans to scale its go-to-market strategy and enhance product capabilities to serve global organisations facing mounting cybersecurity workloads.
Legion addresses a long-standing problem in the cybersecurity industry—alert fatigue. Security analysts are typically overwhelmed with incoming alerts, with many firms operating at 26–45% below required staffing levels. A recent study cited by the company found that 71.6% of analysts spend most of their time triaging alerts and handling false positives, leaving little room to deepen expertise or respond to complex threats.
Legion’s AI system observes analysts’ behaviour via a lightweight browser extension and then builds reusable workflows from those actions. These workflows are surfaced back to the team, who can choose to optimise or automate them, either with human oversight or entirely autonomously. The platform works across any browser-accessible tools, including SIEMs, threat intelligence feeds, email platforms, and internal systems—requiring no custom playbooks or technical setup.
Legion CEO Ely Abramovitch said, “Most AI-driven SOCs still require complex integrations, and even then, they fail to adapt to each organization’s unique environment, making them difficult for enterprise teams to fully trust. Legion is the first browser-based platform designed to scale your team’s best instincts into AI-driven workflows. It’s fully trained within your environment, by your team, for your team. Our goal is to turn your expertise into scalable automation, letting the security team focus on what’s really important.”
Coatue managing director Sri Viswanath added, “What sets Legion apart is its browser-native AI platform. It studies how security analysts work and instantly scales those workflows, cutting investigation and response times by up to 90 percent. No rigid playbooks, no messy integrations.”
Customers already using Legion’s platform, including several Fortune 500 firms, have reported significant performance gains. Some organisations have been able to fully internalise their SOC operations, while others have seen productivity gains equivalent to hiring nine additional analysts, without increasing headcount.
This marks Legion’s first public announcement of funding since its founding. The company was established by cybersecurity veterans Ely Abramovitch, Michael Gladishev, and Eyal Fisher, all with backgrounds at Microsoft Sentinel and Cambridge AI research.
Copyright © 2025 RegTech Analyst
Copyright © 2018 RegTech Analyst
