Early access

Your AI SOC analyst. You stay in command.

Yugarten investigates every alert from your security tools in minutes, writes the verdict and proposes the response. Nothing runs until an analyst approves it.

Book a demo See how it works

GDPR
Law 09-08 (CNDP)
MITRE ATT&CK
Hosted in Morocco and the EU
SOC 2 and ISO 27001 in progress

How it works

From alert to approved response, in minutes.

01
Ingest
Connect your SIEM, EDR, cloud and identity tools. Alerts arrive by webhook or API polling.
02
Investigate
The AI triages each alert, queries your tools, enriches indicators and maps the activity to MITRE ATT&CK.
03
Decide
It writes a verdict with a confidence score and a clear report, then proposes response actions.
04
Approve
An analyst approves or rejects each action. Only approved actions run, and every decision is audited.

Features

One platform for the whole SOC.

Investigation, response, detection, hunting and intelligence, built around your analysts.

AI investigations
Every alert is triaged, enriched and investigated with your own tools. You get a verdict, a confidence score and a readable report.
Human-approved response
The AI proposes containment and remediation. Nothing runs until an analyst approves it.
Incidents and shift handoff
Group related alerts into incidents, assign owners, track SLAs and hand over each shift with a generated summary.
Detection engineering
Write and version detection rules, deploy them to Splunk, Elastic, Microsoft Sentinel or Git, and track your ATT&CK coverage.
Threat hunting
Run hypothesis-driven hunts across your SIEM with AI-assisted queries, and turn findings into rules.
Threat intelligence
Feeds, indicators and threat actors in one place, with AI briefings on what matters to your organization.
OSINT and attack surface
Watch your exposed assets, leaked credentials, dark web mentions and the Telegram channels that target you.
Your playbooks, followed
Add your procedures. The AI retrieves them during each investigation and proposes actions the way your team would.
Built for MSSPs
Strict tenant isolation, roles, API keys and an audit log. Run every client from one platform.
SOC analytics
Alert funnel, time to detect, investigate and contain, and analyst workload, to show what your SOC delivers.

Human in the loop

AI speed. Human judgment.

Yugarten never acts on its own. Whatever the confidence score, every response action waits for an analyst's explicit approval.

No automatic execution, at any confidence level
Every proposal comes with its evidence and reasoning
An append-only audit trail of every decision

Privacy by design

Your data is anonymised before the AI sees it.

Domains, names, IP addresses and emails are replaced with consistent tokens before an alert reaches the model. The real values come back only inside your platform, in the final report.

Your alert

Email: y.elidrissi@atlasbank.example
Name: Youssef El Idrissi
IP: 10.20.4.17
Domain: vpn.atlasbank.example
Host: WS-FIN-042

What the model sees

Email: <EMAIL_1>
Name: <PERSON_1>
IP: <IP_1>
Domain: <DOMAIN_1>
Host: <HOST_1>

01Detect
Sensitive values are found in every field of the alert.
02Replace
Each one becomes a stable token, so the AI can still correlate events.
03Restore
Real values reappear only in your report, never in the model.

Deployment

Run it your way.

Two ways to deploy, the same platform and the same guarantees.

SaaS

Fully managed

We host, run and update Yugarten for you. Connect your tools and start investigating within days.

Hosting in Morocco or in the EU
Updates, monitoring and backups included
Nothing to install

Hybrid

Model sovereignty

We manage the platform. The AI model runs on your own infrastructure, so inference happens where you decide.

You host the model, on infrastructure you control
We help you choose, size and tune the right model
Same features, same human approval

In both modes, client data is anonymised before it reaches the model.

Security and compliance

Built for regulated teams.

Data residency where you need it, and the controls your auditors ask for.

Data residency

Morocco
Hosted in Morocco on Oracle Cloud Infrastructure, for Moroccan and African organizations.
European Union
Hosted in the EU, for European organizations.

Standards

GDPR
Data minimisation, anonymisation and tenant isolation by design.
Built in
Law 09-08 (CNDP)
Aligned with Morocco's personal data protection law.
Built in
MITRE ATT&CK
Every investigation and detection rule is mapped to ATT&CK techniques.
Mapped
SOC 2 Type II
Independent audit of our security controls.
In progress
ISO/IEC 27001
Certification of our information security management system.
In progress