Vega II brings security-trained AI and lasting memory to the SOC
Vega has introduced Vega II, its biggest platform release since emerging from stealth. The update brings frontier AI trained for security operations into the SOC, gives teams a lasting record of what they have learned, and removes the legacy SIEM and data pipeline barriers that have kept vital information out of reach.
With Vega II, every security team has the harness for cyber defense: the system where AI runs detection, triage, and investigation as an autonomous loop, directed by the judgment of their best defenders, and spanning every source they were forced to keep out of the SIEM.
“AI gave attackers a head start. It doesn’t have to give them the future,” said Shay Sandler, CEO of Vega. “Two years ago, we founded Vega on one conviction: the SOC has a new operator, AI agents, and they need all your data, the knowledge and judgment of your best defenders, and a model post-trained for agentic cyber defense. With Vega II, every team finally has the harness, the model, and the speed to win the fight.”
Why now
Adversaries adopt frontier models the week they ship. Defenders answer with reasoning never tuned for cyber defense, facts lost when the case closes, and data held behind connectors and pipeline projects. And generic AI is slow: it reasons from scratch on every alert while the attacker keeps moving. An agent can’t reason with expertise it never had, apply what it never learned, or investigate what it can’t reach. Break the barriers keeping frontier AI from becoming extraordinary cyber defense, and the next era belongs to the defenders.
The harness and the model, built for the fight
Agentic Cyber Defense demands a purpose-built model, lasting memory of the environment, and access to all data wherever it is stored. With Vega II, teams can:
- Bring specialized AI reasoning to the fight: Vega’s first model, post-trained for agentic cyber defense, runs beside frontier intelligence in the platform. Built for speed: it reaches the verdict while generic AI is still thinking, so every alert gets an expert’s read at a scale no team can staff.
- Make every lesson last: Vega Memory captures the environment’s ground truth and actions taken, so each verdict starts from what the team already knows. Engineers inspect, trace, and control what gets saved.
- Access all data: Vega Gateway streams any source into low-cost object storage over OpenTelemetry, webhook, or API, without complex pipelines or legacy connectors. It extends Vega’s in-place analytics to the sources with nowhere to live, onboarded in minutes, so investigations follow attackers where the SIEM never looked.
