Systemtwosecurity

System Two Security Inc. is a Palo Alto, California cybersecurity company that applies generative AI models and role-based agents to detection engineering and threat hunting for enterprise security teams. Its stated premise is that writing effective enterprise detections is largely a manual process that can take skilled teams days, while attackers increasingly use generative AI to raise the speed and sophistication of attacks; the company positions its models, trained on detection and security data, as a way to make detection creation ongoing, adaptive and automatic, generating actionable detections from identified coverage gaps.

The company's product is delivered as detections.ai, offered in a single product with two tiers. A free community tier gives users access to tens of thousands of community-contributed detections, an unlimited AI assistant for generating and refining rules, translation across nine rule languages, MITRE ATT&CK mapping on every detection, saved searches with email alerts, and publishing of their own detections. An enterprise tier adds live coverage views across a team's SIEMs (including CVE and MITRE ATT&CK mapping and historical trends), detections tuned to a customer's environment and data sources, scheduled AI routines that audit and tune the detection library, a private team workspace, governance, and deployment back into customer SIEMs. The platform is designed to work across major enterprise security systems including Splunk, Microsoft Sentinel and CrowdStrike's Next-Gen SIEM.

Founding story

The company was founded in 2023 by CEO Robert Fly, previously CEO of Elevate Security and a former Salesforce security executive, and CTO Prasanth Ganesan, a former Symantec executive.

Business model

B2B subscription SaaS, with a free community tier of the detections.ai platform alongside a paid enterprise tier sold to security teams.

Subscription software sold to enterprise detection and security operations teams; the community tier is offered free.

Traction

The detections.ai community reports more than 16,000 detection engineers, with 847+ joining in a single week, and tens of thousands of community detections. The site lists users at organizations including Google, Deloitte, SentinelOne, RSM US, Microsoft, Optiv, PwC, TD Bank Group, IBM, Cisco, Wynn Las Vegas and Target. At the time of its funding announcement, early design partners reported up to 10x time savings in analyzing new threats, including generative-AI-focused LLMJacking compromises.

Latest developments

The company announced general availability of detections.ai Enterprise, adding cross-SIEM coverage visibility, environment-specific tuning, scheduled AI audit routines, a private team workspace, governance and deployment back to customer SIEMs.