D3 Security

D3 Security builds SOAR (security orchestration, automation, and response) technology, most recently under the Morpheus and Smart SOAR product names, designed to automate the triage, investigation, and response work that otherwise consumes SOC analyst time. The platform connects to a large library of third-party security tools (D3 cites more than 800 integrations), correlates and enriches alerts, and applies automated playbooks so that a large share of incoming alerts can be triaged without a human touching each one individually — the company’s own figures put this at up to 95% of alerts triaged and investigated in under two minutes.

D3 traces its incident-response-automation roots back to 2015, before Gartner formally coined the term SOAR, and the company is headquartered in Vancouver, British Columbia, with roughly 175 employees and reported 2024 revenue of about $11.9 million. In 2021, D3 raised $10 million in growth equity from Vistara Growth alongside a $5 million credit facility, funding that supported international expansion. The company has explicitly positioned itself as a vendor-agnostic, independent SOAR platform, distinguishing it from SOAR features bundled into a specific SIEM vendor’s ecosystem, and Microsoft’s own security blog has featured D3’s integration for automating response across Microsoft’s security product suite — a notable third-party validation point given Microsoft’s own competing security tooling.

For CISOs running or evaluating a SOC, D3 is relevant as a platform bet aimed at analyst efficiency and alert fatigue, particularly for MSSPs and larger security teams managing high alert volumes across many disparate tools; its independent, cross-vendor integration approach is the clearest differentiator versus SOAR capabilities built into a single SIEM or XDR vendor’s stack.