Cotool
Cotool is a Y Combinator-backed AI co-pilot for security operations teams that automatically assembles investigation context across a SOC's existing tools, turns successful investigations into reusable no-code automations, and generates reports, with early users reporting a 90% reduction in investigation time.
Visit Website ↗ + Add to CompareOverview
Cotool builds an AI agent platform for security operations teams centered on three capabilities: an AI co-pilot that automatically pulls together relevant context across a SOC’s existing tools during an investigation, a no-code agent builder that converts successful investigation patterns into reusable automations, and automated report generation to close out incidents faster.
Founded by Max Pollard (CEO), Logan Carmody (CTO), and Eddie Conk (CPO/Head of AI), Cotool went through Y Combinator’s Spring 2025 batch, is based in San Francisco, and raised a $7.4 million seed round led by Andreessen Horowitz, announced in March 2026.
Innovation Matrix Assessment
Securing a $7.4M seed round led by a16z and shipping a working SOC co-pilot with an agent builder within roughly a year of founding indicates strong early execution pace.
Automatically assembling investigation context across a SOC's fragmented tool stack directly addresses one of the most persistent, time-consuming manual tasks security analysts perform during every incident.
A $7.4M seed round led by Andreessen Horowitz is a strong signal for a company this early, though no named enterprise customers or broader adoption data were found.
Turning successful investigation patterns into reusable no-code automations is a meaningfully more adaptive approach than static SOAR playbooks, though the underlying goal (SOC automation) is an established category.
The 90% investigation-time reduction figure comes from early users per the company's own launch post and has not been independently benchmarked by a third party.
SOC analyst shortage and alert fatigue are persistent, well-documented industry problems, giving AI-assisted investigation tooling durable relevance regardless of this specific vendor's trajectory.
Why CISOs Should Care
SOC analyst time is consistently the scarcest resource in security operations, and manual context-gathering across a dozen disconnected tools is a major driver of alert fatigue and slow response; Cotool targets that specific bottleneck directly rather than adding another alert source.
What Makes It Different
Cotool's no-code agent builder that converts a security team's own successful investigation patterns into reusable automations is a more adaptive approach than pre-built SOAR playbooks that require dedicated engineering time to customize.
The Matrix Verdict
55/100 — INCREMENTAL INNOVATOR
A well-funded (a16z-backed), early but promising AI SecOps co-pilot with a credible, specific efficiency claim; scores reflect strong operational relevance tempered by the vendor-reported nature of its headline efficiency metric.
Editorial Note: Claims vs. Verified Findings
YC batch, founders, headquarters, and the $7.4M a16z-led seed round are independently confirmed via Cotool's Y Combinator company page; the 90% investigation-time reduction figure is vendor-stated from early users and not independently benchmarked.
Sources
Alternatives to Cotool
Quilr
Early-stage agentic AI security startup building a 'Service-as-Software' platform to guard against human-related breaches and secure AI agent…
Adaptive Security
AI-driven platform that simulates deepfake, voice, and multichannel social-engineering attacks to train and test organizations against next-generation phishing.
Tenzai
An agentic AI penetration testing startup building autonomous 'AI hackers' to find and validate exploitable vulnerabilities at a…
Zenity
Governance and security platform for AI agents and low-code/no-code development, securing agent identity, permissions and behavior across the…
Charm Security
Agentic AI workforce that investigates and intervenes on scams and fraud in real time, reading manipulation and intent…
Alice (formerly ActiveFence)
Israeli AI security company (rebranded from ActiveFence in January 2026) offering a lifecycle platform to test, guard, and…