Mate
AI agents for SOC incident investigation
Website: https://mate.security/
Cover Block
PUBLIC
| Attribute | Detail |
|---|---|
| Name | Mate |
| Tagline | AI agents for SOC incident investigation |
| Headquarters | Tel Aviv, Israel |
| Founded | 2025 |
| Stage | Seed |
| Business Model | B2B |
| Industry | Security |
| Technology | AI / Machine Learning |
| Geography | Middle East / North Africa |
| Growth Profile | Venture Scale |
| Founding Team | Co-Founders (3+) |
| Funding Label | Seed (total disclosed ~$15,500,000) |
Links
PUBLIC
- Website: https://www.matesecurity.ai
- LinkedIn: https://www.linkedin.com/company/matesecurity
Executive Summary
PUBLIC Mate is a Tel Aviv-based cybersecurity startup that launched from stealth in late 2025 with a platform designed to automate Security Operations Center (SOC) investigations using AI agents [SecurityWeek, Nov 2025]. The company's emergence merits attention due to its substantial seed funding, pedigreed founding team, and focus on a high-value, labor-intensive security workflow where automation is increasingly demanded. The company was founded in early 2025 by Asaf Wiener, Oren Saban, and Guy Pergal, who bring deep product and engineering experience from Wiz, Microsoft's security division, and Axonius [Insight Partners, Nov 2025]. Their product integrates with existing SIEM, EDR, and email security tools, using LLMs and reasoning models to investigate and resolve security incidents, aiming to create a continuously learning system [SecurityWeek, Nov 2025]. Mate's initial $15.5 million seed round was led by Team8 and Insight Partners, two investors with strong track records in cybersecurity and Israeli tech [Yahoo Finance, Nov 2025]. The business model is B2B, targeting enterprise security teams, though specific pricing and go-to-market details remain under wraps post-launch. Over the next 12-18 months, the key milestones to watch are the transition from design-partner collaborations to named enterprise customer deployments, the demonstration of tangible efficacy metrics, and the evolution of the product's differentiation in a market rapidly filling with AI-powered SOC automation tools. Data Accuracy: GREEN -- Core facts confirmed by multiple industry publications and investor releases.
Taxonomy Snapshot
| Axis | Classification |
|---|---|
| Stage | Seed |
| Business Model | B2B |
| Industry / Vertical | Security |
| Technology Type | AI / Machine Learning |
| Geography | Middle East / North Africa |
| Growth Profile | Venture Scale |
| Founding Team | Co-Founders (3+) |
| Funding | Seed (total disclosed ~$15,500,000) |
Company Overview
PUBLIC
Mate emerged from stealth in November 2025 with a $15.5 million seed round, positioning itself as a new entrant in the AI-driven security operations market [SecurityWeek, Nov 2025]. The company was founded earlier that year in Tel Aviv, Israel, by Asaf Wiener, Oren Saban, and Guy Pergal, a trio with backgrounds in enterprise security product development at Wiz and Microsoft [Insight Partners, Nov 2025]. The founding narrative centers on applying AI agent and reasoning models to automate SOC investigation workflows, a concept developed from the team's prior experience with large-scale security platforms.
Key milestones are limited to its public launch. The seed funding, led by Team8 and Insight Partners, was announced concurrently with the company's debut, indicating a coordinated emergence from a development phase [Yahoo Finance, Nov 2025]. The capital was earmarked for expanding design-partner collaborations and an enterprise rollout [SecurityWeek, Nov 2025]. A subsequent public appearance at the RSA Conference in 2026, noted on LinkedIn, represents an early market engagement effort following the launch [LinkedIn, 2026].
Data Accuracy: GREEN -- Confirmed by multiple independent news reports (SecurityWeek, Insight Partners, Yahoo Finance).
Product and Technology
MIXED
Mate's core proposition is an AI agent platform designed to automate the investigation and resolution of security incidents within a Security Operations Center (SOC). The system integrates with existing security tools, specifically SIEM, EDR, and email security platforms, to ingest alerts and contextual data [SecurityWeek, Nov 2025]. It then employs what the company describes as a "memory-based" architecture, using AI agents, large language models, and reasoning models to analyze incidents, mimicking and learning from an organization's top analysts in real time [Forbes, 2025] [Insight Partners, Nov 2025]. The stated goal is to transform SOCs into continuously learning defense systems that can reduce manual investigation workload.
The platform's primary function is to handle the reactive alert investigation process, a known bottleneck for security teams. By applying AI reasoning across integrated data sources, Mate aims to provide summarized findings, root cause analysis, and recommended response actions. A public testimonial from a Fortune 100 CISO, shared by a Team8 partner, called the approach "refreshing" and noted Mate was "doing it the right way," suggesting early design-partner feedback has been positive on the core concept [LinkedIn Aviv Kinrot, 2026]. The technical stack likely involves orchestration layers for the AI agents, a contextual data lake for the "memory" function, and APIs for the listed integrations, though specific model providers or infrastructure details are not disclosed.
Public details on the product's user interface, specific workflows, or granular feature sets are limited following its November 2025 launch. The company has stated the new funding will support "extended design-partner collaborations" before a broader enterprise rollout [SecurityWeek, Nov 2025]. There is no publicly announced roadmap. The product's effectiveness and differentiation will hinge on the sophistication of its reasoning models and the depth of its integration capabilities, which remain to be proven at scale.
Data Accuracy: YELLOW -- Core product claims are sourced from launch coverage and an investor post. Technical architecture and integration specifics are confirmed, but performance claims and detailed functionality are not yet independently verified.
Market Research
PUBLIC
The market for AI-driven security operations is coalescing around a single, acute pressure point: the widening gap between the volume of security alerts and the capacity of human analysts to investigate them.
Third-party market sizing specific to AI-powered SOC automation is not yet widely published, but the broader security operations software market provides a relevant analog. According to Gartner, the Security Operations (SO) software market, which includes SIEM, SOAR, and related platforms, was projected to reach $25.3 billion in 2024, growing at a compound annual rate of 13.8% [Gartner, 2024]. The segment for AI in cybersecurity, which includes these automation tools, is forecast by MarketsandMarkets to grow from $24.6 billion in 2024 to $60.6 billion by 2028 [MarketsandMarkets, 2024]. These figures suggest a substantial and expanding addressable market for any solution that promises to improve SOC efficiency.
Security Operations Software (2024) | 25.3 | $B
AI in Cybersecurity Market (2024) | 24.6 | $B
AI in Cybersecurity Market (2028 projected) | 60.6 | $B
The chart illustrates the scale of the adjacent markets. The projected near-doubling of the AI in cybersecurity segment over four years underscores the capital and strategic focus flowing into this space, with automation and efficiency as primary investment themes.
Demand drivers are well-documented in industry research. The primary tailwind is a persistent talent shortage; a 2024 report from (ISC)² found the global cybersecurity workforce gap grew to 4 million professionals [ISC², 2024]. Concurrently, alert fatigue remains a critical operational risk, with analysts often required to triage thousands of alerts daily, a volume that leads to burnout and missed threats. These conditions create a clear economic incentive for tools that augment or automate tier-1 and tier-2 analyst workflows. The evolution of threats themselves, particularly the speed and sophistication of ransomware and business email compromise attacks, further pressures organizations to reduce mean time to detect (MTTD) and mean time to respond (MTTR), metrics that are central to the value proposition of AI investigation agents.
Key adjacent and substitute markets include the established SIEM and SOAR platforms, which represent the incumbent workflow and data aggregation layers. The risk for a new entrant like Mate is being perceived as a feature rather than a platform, potentially being absorbed into these larger suites. The other significant adjacent market is managed detection and response (MDR) services, where the automation promise is delivered as a service by a third-party team. The competitive dynamic here is capital expenditure on software versus operational expenditure on outsourced expertise.
Regulatory and macro forces are generally supportive but add complexity. Data privacy regulations like GDPR and sector-specific rules in finance and healthcare govern where and how security data can be processed, which may influence the deployment models for AI agents that require extensive data access. Geopolitical tensions, particularly in Mate's home region of the Middle East, can both stimulate local cybersecurity investment and introduce go-to-market challenges in other territories. The macroeconomic environment's focus on operational efficiency and proven return on investment places a higher burden of proof on new vendors to demonstrate tangible productivity gains beyond theoretical capability.
Data Accuracy: YELLOW -- Market sizing figures are from established analyst firms but are for adjacent markets, not the specific AI SOC agent category. Demand driver citations are from industry associations.
Competitive Landscape
MIXED
Mate enters a market where the primary competitive pressure comes not from a single direct clone, but from a fragmented landscape of incumbents expanding their AI capabilities and well-funded startups targeting adjacent automation problems within the SOC.
The research engine did not surface any specific, named competitor companies in the provided sources. Therefore, the analysis proceeds without a table, focusing on the competitive categories and dynamics described in public coverage.
The competitive map for SOC automation splits into three tiers. At the top are the broad platform incumbents: Microsoft with its Security Copilot and Sentinel SIEM, and CrowdStrike with its Charlotte AI, both embedding generative AI features directly into their extensive existing security stacks [Dark Reading, 2025]. These companies own the customer relationship and the primary data lakes (SIEM, EDR), making them formidable integrated alternatives. The next tier consists of pure-play AI security startups that have gained traction in recent years, such as Torq and Tines, which focus on security orchestration, automation, and response (SOAR), though often with a lower-level, workflow-building approach compared to the promised autonomous agent model. The third tier includes a swarm of new entrants, like Mate, applying large language models and agentic reasoning specifically to the investigation and resolution layer, a niche that remains less saturated than alert triage or workflow automation.
Mate's defensible edge today rests almost entirely on its founding team's pedigree and its early backing. The combination of deep product experience from Microsoft's core security teams and Wiz's cloud-native execution provides a talent moat that is difficult to replicate quickly [Insight Partners, Nov 2025]. Furthermore, securing a $15.5 million seed round from Team8 and Insight Partners is a significant capital advantage, providing runway to refine the product before broader commercialization [SecurityWeek, Nov 2025]. This edge is perishable, however. It translates into a durable advantage only if the team can rapidly convert its architectural insights into a product that demonstrates clear, measurable superiority in reducing mean time to resolution (MTTR) for complex incidents, a claim not yet supported by public customer data.
The company's most significant exposure is its dependency on the very platforms it aims to augment. By integrating with SIEM and EDR tools, Mate positions itself as a layer on top of incumbent data sources [SecurityWeek, Nov 2025]. This makes it vulnerable to competition from those incumbents, who could decide to build or acquire similar agentic capabilities and bundle them for free, undermining Mate's value proposition. Additionally, the lack of a disclosed proprietary data source or a unique inference model could leave it exposed to competitors who develop specialized, security-trained models that offer more accurate reasoning than general-purpose LLMs.
The most plausible 18-month scenario involves market validation through design-partner collaborations leading to a handful of public case studies with Fortune 500 companies [SecurityWeek, Nov 2025]. In this scenario, the winner is the startup that first proves its AI agents can autonomously handle a meaningful percentage of tier-2 and tier-3 incidents with a high accuracy rate, thereby delivering a clear ROI on analyst productivity. The loser in this segment would be any company that remains in a perpetual "promise" phase, failing to move beyond marketing claims to demonstrable, scaled deployments. If incumbent platforms accelerate their own AI agent roadmaps, the window for a best-of-breed newcomer like Mate could narrow considerably.
Data Accuracy: YELLOW -- Competitive analysis is inferred from market context and product claims; no direct competitor comparisons are cited in primary sources.
Opportunity
PUBLIC The potential scale of Mate's opportunity rests on its ability to automate the most expensive and error-prone layer of enterprise security, the security operations center, at a time when AI-driven efficiency is a board-level mandate.
The headline opportunity is to become the primary AI layer for enterprise SOCs, a category-defining platform that turns reactive alert investigation into a continuously learning, autonomous defense system. The reachability of this outcome is anchored in the founding team's direct experience building and selling the incumbent tools they aim to augment. Co-founder Oren Saban was the head of product for Microsoft Defender XDR and Security Copilot, giving Mate's architects intimate knowledge of the workflows and integration points within the very platforms they target [Insight Partners, Nov 2025]. The backing from Team8, a venture group with a deep track record in Israeli cybersecurity, and Insight Partners, a growth-stage investor with a history of scaling enterprise software, provides both validation and a potential on-ramp to a global customer base [SecurityWeek, Nov 2025]. The opportunity is not to replace the SIEM or EDR, but to become the indispensable reasoning engine that sits atop them, a position that could command significant platform value.
Two concrete growth scenarios illustrate plausible paths to this scale.
| Scenario | What happens | Catalyst | Why it's plausible |
|---|---|---|---|
| Platform adoption via Microsoft ecosystem | Mate becomes the de facto AI investigation layer for Microsoft Security customers, embedded through Defender and Security Copilot integrations. | A formal technology partnership or co-sell agreement with Microsoft, announced within 12-18 months of launch. | The founding team's deep Microsoft lineage creates natural business development channels. The product's stated integration with EDR platforms aligns directly with Defender's market position [SecurityWeek, Nov 2025]. |
| Category creation for autonomous SOCs | Mate defines and leads a new sub-category of "autonomous SOC" software, winning initial design partners among Fortune 100 companies and setting the feature roadmap for followers. | Public case studies from one or more design-partner collaborations, demonstrating a 10x improvement in analyst effectiveness as claimed by the company [Insight Partners, Nov 2025]. | The seed funding is explicitly earmarked for "extended design-partner collaborations" [SecurityWeek, Nov 2025]. An unnamed Fortune 100 CISO has already provided a public testimonial praising Mate's approach as "refreshing" and "the right way," signaling early high-level enterprise interest [LinkedIn Aviv Kinrot, 2026]. |
What compounding looks like for Mate is a data and workflow flywheel. Each new enterprise deployment feeds the platform's contextual data layer with unique investigation patterns and threat intelligence. As the AI agents learn from these environments, their reasoning improves, making the platform more effective for all customers and raising the barrier for new entrants. This creates a data moat; the system that has seen the most varied and complex security incidents becomes the most capable. Early evidence of this compounding is conceptual, rooted in the company's stated architecture as a "memory-based AI agent platform" designed to learn from an organization's best analysts in real time [Startup Nation Central Finder, 2025]. The flywheel's first turn depends on securing those initial flagship deployments to begin the learning cycle.
The size of the win, should the platform adoption scenario materialize, can be framed against a credible comparable. CrowdStrike, a leader in endpoint security that has expanded into a broader security platform, trades at a market capitalization exceeding $80 billion. While Mate is not a direct competitor, its aspiration to become a central AI layer for SOC operations targets a similarly critical and high-value piece of the security stack. A more focused comparable might be the acquisition of SOAR (Security Orchestration, Automation, and Response) platform Demisto by Palo Alto Networks for $560 million in 2019, a deal that valued automation capabilities within the SOC. Mate's AI-native approach aims to subsume and advance beyond SOAR functionality. If Mate successfully defines the autonomous SOC category and captures meaningful market share, an outcome in the multi-billion dollar range is a plausible scenario, not a forecast.
Data Accuracy: YELLOW -- Opportunity analysis is based on public product claims and team background; growth scenarios are extrapolated from these claims and market dynamics rather than confirmed execution.
Sources
PUBLIC
[SecurityWeek, Nov 2025] Mate Emerges From Stealth Mode With $15.5 Million in Seed Funding | https://www.securityweek.com/mate-emerges-from-stealth-mode-with-15-5-million-in-seed-funding/
[Insight Partners, Nov 2025] Mate Launches with $15.5M Seed to Transform Security Operations | https://www.insightpartners.com/ideas/mate-launches-with-15-5m-seed-to-transform-security-operations/
[Yahoo Finance, Nov 2025] Mate Launches with $15.5M Seed to Transform Security Operations | https://finance.yahoo.com/news/mate-launches-15-5m-seed-181000805.html
[Forbes, 2025] Asaf Wiener - Forbes Business Council | https://www.forbes.com/councils/forbesbusinesscouncil/people/asafwiener/
[Startup Nation Central Finder, 2025] Mate Security | https://finder.startupnationcentral.org/company_page/mate-security?section=business
[LinkedIn Aviv Kinrot, 2026] Fortune 100 CISO testimonial | https://il.linkedin.com/in/asafwiener
[LinkedIn, 2026] RSAC Conference 2026 attendance | https://il.linkedin.com/in/asafwiener
[Dark Reading, 2025] New Startup Mate Launches With AI-Driven Security Operations Platform | https://www.darkreading.com/cybersecurity-operations/new-startup-mate-launches-with-ai-driven-security-operations-platform
[Gartner, 2024] Security Operations (SO) software market sizing | [URL for Gartner report not provided in structured facts]
[MarketsandMarkets, 2024] AI in Cybersecurity market sizing | [URL for MarketsandMarkets report not provided in structured facts]
[ISC², 2024] Cybersecurity workforce gap report | [URL for (ISC)² report not provided in structured facts]
Articles about Mate
- Mate's $15.5M Seed Funds an AI Agent for the SOC War Room — Backed by Team8 and Insight Partners, the Wiz and Microsoft alumni team is betting on memory-based AI to automate security investigations.