Simbian

Simbian sells four agent products that share one 'Context Lake' (its term for a shared knowledge/telemetry store) and one reasoning engine: an AI SOC Agent (alert triage/investigation/response), an AI Threat Hunt Agent (validates hunt hypotheses against historical telemetry), an AI Pentest Agent (continuous exploit-path validation), and an AI NetSecOps Agent (firewall/network policy automation). The pitch is a closed loop — a pentest finding can trigger a SOC detection check, a SOC alert can trigger a threat hunt — rather than point tools that don't talk to each other. It connects to 100+ named security and IT tools (CrowdStrike, Splunk, Microsoft Sentinel/Defender, Okta, Wiz, ServiceNow, etc.), listed individually on its integrations page.

Simbian Research published the Cyber Defense Benchmark (arXiv:2604.19533, April 2026), which gives 25 frontier LLMs raw Windows event logs (75,000–135,000 records per episode, real attack telemetry from the OTRF Security-Datasets corpus, not synthetic) and scores them on finding exact malicious-event timestamps with no hints. Result: zero of 25 models pass the paper's own bar (recall ≥50% on every MITRE ATT&CK tactic). The best model, Claude Opus 5, clears only 7 of 13 tactics and a 0.451 coverage score; most models fail every tactic category. This is Simbian's own published research, not independent, but it's methodologically real (deterministic scoring, seeded randomization against memorization, arXiv preprint) and notably undercuts rather than inflates the case for autonomous AI defense — worth reading before trusting any vendor's 'AI SOC' claims, including Simbian's own.

Simbian was founded in 2022 by Ambuj Kumar (ex-Nvidia, Fortanix co-founder) and Alankrit Chona (ex-Twitter), headquartered in Mountain View. The only publicly disclosed funding is a $10M oversubscribed seed, reported by TechCrunch in April 2024, from investors including Coinbase board member Gokul Rajaram, Cota Capital, Icon Ventures, Firebolt, and Rain Capital; the company had 15 employees at that time. No later funding round (Series A or beyond) is disclosed on Simbian's site or found in press coverage as of this check — for a company now claiming '#1 in AI SOC ARR' and a customer base up 15x year-over-year (per its own February 2026 press release), that's a notable gap in public financial disclosure. Independently, KuppingerCole's April 2026 'Emerging AI SOC' Leadership Compass rates Simbian as one of 17 evaluated vendors but places it in the general 'Rated Vendor' tier, not among the report's eight named 'Overall Leaders' (CrowdStrike, Google, Microsoft, Palo Alto Networks, ServiceNow, Swimlane, Tines, Torq).

No pricing is published anywhere on the site — every product page routes to 'Book a Demo,' and there's no pricing page (a direct URL check returns 404). G2's Simbian reviews page returns an access error on fetch, and no independent review-site rating could be verified. There's no dedicated security/trust-center page with a SOC 2 report or compliance badges; what is published is a standard Data Processing Addendum (with a named sub-processor list: AWS, Microsoft, Auth0, HubSpot, Slack, Stripe, Notion) and an SLA promising 99.9% uptime with tiered service credits and a 3-hour recovery time objective.