Artemis Security

Artemis Security (corporate entity reported as Artemis Global Technologies Inc.) builds an AI-native security operations platform intended to replace or supplement traditional SIEM and detection tooling. The core of the product is what the company calls an "Environment Model": a continuously updated representation of every user, account, device, resource, cloud workload, application and AI agent in an organization, along with the relationships between them and their business context. The model is populated from authoritative systems of record — identity providers, HR systems and org structure, CMDB/ITSM and asset management, crown-jewel maps — rather than inferred from past alerts, and is applied at detection time rather than consulted after another system raises a flag.

On top of the model the platform provides three layers. Adaptive detection starts from MITRE ATT&CK coverage maintained by an in-house research team, adds behavioral analytics grounded in what is expected for each entity, and synthesizes new detectors against a specific customer environment within minutes when new threat intelligence arrives; detectors auto-tune as the environment changes. Autonomous investigation produces what the company calls a "decision-grade case": one case per actor consolidating identity, cloud, endpoint, AI and SaaS activity into a single narrative with a judgement, confidence level, auditable reasoning chain, the queries the agent ran, and the underlying evidence. Response actions are staged with the case and can be executed autonomously or held for human approval, with the level of autonomy configurable by the customer. Engineers can author custom detectors in natural language via an AI Mode or the Artemis MCP interface, with versioning, audit history and one-click rollback, and without writing SPL, KQL or SQL. According to SC Media's summary of Silicon Angle reporting, the platform uses federated querying to analyze telemetry where it is generated instead of centralizing data, positioning it as a lower-cost alternative to SIEM data streaming, and on detection produces a visual attack timeline, a natural-language incident description and remediation suggestions.

Founding story

Co-founders Shachar Hirshberg (CEO) and Dan Shiebler (CTO) started the company approximately seven months before the April 2026 public launch. Hirshberg describes a prior decade building and scaling enterprise security operations platforms as a product and engineering leader at Demisto, Palo Alto Networks and AWS GuardDuty, working with security operations centers ranging from Fortune 500 companies to 200-person startups. Shiebler's background is in architecting AI systems over large data volumes: behavioral modeling of hundreds of millions of users at Twitter, and leading AI/ML at Abnormal AI, where similar techniques modeled organizational communication patterns for email security. The founding thesis was that AI reasoning becomes substantially more reliable when it operates over a structured model of the environment being analyzed, and the founders applied that principle to enterprise infrastructure telemetry.

Business model

Enterprise software sold to security operations teams; the platform is deployed into customer environments, integrating with existing log sources, identity systems, cloud, endpoint, network, SaaS and AI telemetry. Specific pricing and contract structure are not disclosed in the sources, though the company references a "contract term," implying subscription-based enterprise agreements.

Traction

Customers are reported to have reduced mean time to detect and respond by 94%. The platform processes over 15,000TB of data daily and more than 2 billion events per hour, generating over 2,000 insights daily. At Cursor, Artemis is described as investigating every alert generated across more than 10 billion events per day, with 96% of cases closing without human involvement, and running thousands of continuously tuned detectors correlating more than 20 log sources. The company says it is in production with large and fast-growing companies in financial services, technology and insurance.

Latest developments

Following the April 2026 stealth exit and $70M announcement, Artemis published an integration with the Anthropic Compliance API and telemetry in June 2026, and research/thought-leadership posts in July 2026 on AI-speed attack tempo, machine-speed defense, and AI-driven breaches that went undetected at real companies. The company states it is hiring across R&D, go-to-market, product and marketing.