Joon
Founded 2025 · 26 employees on LinkedIn · 1 known investors
Joon builds an autonomous AI workforce for cyber defense, deploying AI "workers" that operate security operations within a customer's own environment rather than tools a team operates. It targets security operations teams at large and critical organizations, founded by the team behind Siemplify SOAR.
Also known as Joon
Investors · 1
Company profile
researched Aug 2026Joon offers AI-managed cybersecurity, positioning its product as an autonomous workforce of AI "workers" that carry out security operations tasks inside a customer's existing environment rather than as tooling a customer's staff must operate. The company presents named worker roles covering distinct security functions: a detection engineer that builds, tunes and maintains detection coverage; a validation engineer that runs attack simulations to expose gaps in defensive coverage; a SOC analyst that investigates alerts and contains incidents; and a threat hunter that proactively looks for hidden adversaries and behavioral anomalies.
The stated delivery model combines agentic automation with human oversight: elite human teams train and review the AI workers, and Joon says outcomes are measured and delivered under service-level agreements rather than estimated. Deployment is described as taking days, without re-platforming or data migration, with workers connecting directly to a customer's existing enterprise and security tools. Joon frames the offering as an alternative to growing internal headcount or outsourcing security operations.
Business model
Joon sells an AI-delivered security operations service to enterprise buyers, connecting its AI workers to a customer's existing security and enterprise tooling and committing to measured outcomes under service-level agreements. Prospects are directed to book a demo, indicating a sales-led, direct enterprise motion. The site references a cost model positioned as an alternative to traditional security services, but specific pricing is not disclosed.
Latest developments
Joon markets four AI worker roles - detection engineering, defense validation, alert investigation and response, and threat hunting - and publishes claims of full alert coverage, 20x operational speed and continuous 24/7 defense.
▸Full profile — market position, technology, go-to-market
Market position
Joon positions its offering against both hiring additional in-house security staff and outsourcing to managed service providers, emphasizing guaranteed and measured outcomes under SLAs, tailoring to a customer's specific stack and data, human expert supervision of agent quality, and deployment that requires no re-platforming or data migration.
Technology
The product is built around agentic AI "workers" that plan and execute security operations tasks. Joon describes native integrations that let its workers connect to existing enterprise and security tools; contextual accuracy from real-time use of the customer's environment data and configurations; an "AI harness" of Joon-managed systems intended to keep agentic planning and execution safe; full observability into AI actions and decisions for auditing and continuous optimization; and human overwatch, in which expert teams train and review the workers. The team describes prior work inventing SOAR, building Google SecOps and training Sec-Gemini.
Go-to-market
Direct enterprise sales through demo requests on the company website, supported by testimonials from named security leaders and by the founding team's background in security operations tooling.
Security operations buyers at enterprises, with the offering described as designed for demanding environments. Named testimonials come from security leaders at CAVA and H2O.ai and a former CISO of Marriott Vacations Worldwide.
Compiled by commissioned research from 8 cited public sources — announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed — not independently audited.
▸Research sources · 8
primary sources listed
- Joonjoon.co · web
8 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does Joon do?
- Joon deploys an autonomous, AI-based security operations workforce that runs inside a customer's own environment under expert supervision.
- Who are Joon's investors?
- Joon's investors include Mantis Capital.