GCC-born security assistant uses natural language to connect fragmented threat data and cut complex investigations from hours to minutes
Paramount has launched SoCMate, an AI-powered security investigation assistant designed to help security operations teams investigate and contain cyber threats faster. Unveiled at the Microsoft stand during GISEC Global 2026, SoCMate is aimed at CISOs and Level 2 and Level 3 cybersecurity professionals and is currently available for Microsoft Sentinel.
The platform addresses a growing SOC challenge: security teams have access to huge volumes of data across endpoint, identity, cloud and threat-intelligence systems, but connecting those signals during an active investigation can consume valuable analyst time.
SoCMate allows analysts to investigate using natural-language queries, connecting security signals and related evidence to provide a contextual view of suspicious activity, potential attack paths and possible next actions. This shifts the investigation process from manually searching across multiple systems towards an assistant-led approach while retaining human decision-making.
“SoCMate brings a first-of-its-kind approach to SOC investigation, changing the analyst experience from searching manually through fragmented data to working with an assistant that can connect signals, build context and guide the next action, while keeping critical response decisions with the security professionals responsible for them,” said Menon.
“SOC teams are dealing with exponentially growing volumes of security data, and the real challenge is turning that information into actionable intelligence quickly enough to prevent or contain attacks.” — Pradeep Menon, Chief AI and Security Officer, Paramount
Paramount says complex investigations involving activity across multiple systems and suspected data theft can be reduced to approximately eight to 10 minutes. The solution has also been tested across malware alerts, phishing incidents, privilege misuse, suspicious indicators and incident timelines.
The efficiency gains are particularly relevant as organisations face increasingly sophisticated threats and a shortage of skilled cybersecurity professionals. Natural-language interaction can reduce dependence on advanced coding skills and knowledge of underlying security data structures, helping improve consistency and SOC throughput.
“Across the Middle East, organisations are expanding digital services, cloud environments and connected infrastructure at speed. That creates a clear need for continuous security monitoring that can operate 24×7 without depending solely on scarce specialist resources,” said Premchand Kurup, CEO, Paramount.
Kurup added that AI-assisted investigation can reduce the time and cost involved in qualifying incidents while keeping human oversight central to response decisions.
Rather than requiring organisations to replace existing SOC infrastructure, SoCMate is designed to work alongside current security technologies. With Microsoft Sentinel as its initial supported platform, Paramount is positioning the solution as an AI-assisted layer for improving investigation speed, context and operational capacity.
The launch also reflects a broader shift in SOC operations from simply detecting alerts to rapidly establishing context, determining attack scope and prioritising response. As attackers increasingly exploit automation and AI to accelerate their operations, the ability to connect security intelligence quickly could become as important as the volume of security telemetry an organisation collects.
