Kenzo Security
A San Francisco agentic SecOps platform acquired by Rapid7 in March 2026 to power AI-driven MDR.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Kenzo Security, based in San Francisco, built an agentic AI security-operations platform that unifies and normalizes security telemetry into an entity-centric data mesh, enabling multi-agent autonomous investigation of alerts rather than human triage alone. It reports a 94% reduction in investigation time and alert coverage expanded from 12% to 100%.
Rapid7 acquired it in March 2026 to plug Kenzo’s autonomous investigation engine into its Command Platform and push MDR from AI-assisted toward AI-driven operations.
Innovation Matrix Assessment
Multi-agent, entity-centric autonomous investigation is a genuinely advanced application of agentic AI to SecOps, beyond typical copilot tooling.
Directly targets SOC analyst workload and alert-coverage gaps, a top-of-mind operational problem for security leaders.
March 2026 acquisition by Rapid7 (NASDAQ: RPD), a major MDR vendor, provides immediate scale and integration into an established platform.
Autonomous multi-agent investigation pushes meaningfully beyond assisted-triage SOAR tooling, though it builds on an existing MDR category.
Headline efficacy figures (94% time reduction, 100% coverage) are vendor-reported and unverified by an independent third party.
Autonomous SOC investigation directly addresses the persistent analyst-shortage and alert-fatigue problem, giving it durable relevance.
Why CISOs Should Care
Kenzo Security built an agentic AI security-operations platform that unifies and normalizes security telemetry into an entity-centric data mesh, enabling multi-agent autonomous investigation of alerts rather than human analyst triage alone.
What Makes It Different
Kenzo's reported results -- a 94% reduction in investigation time and expanded alert coverage from 12% to 100% -- reflect a shift from AI-assisted analyst workflows to AI-driven, largely autonomous investigation, which is a meaningfully different operating model for a SOC than typical SOAR playbooks.
The Matrix Verdict
52/100 — INCREMENTAL INNOVATOR
One of the more substantive AI-native SecOps acquisitions in this batch: Rapid7's March 2026 purchase directly plugs Kenzo's autonomous investigation engine into its Command Platform to push MDR from AI-assisted to AI-driven operations.
Editorial Note: Claims vs. Verified Findings
The 94% investigation-time reduction and 12%-to-100% coverage expansion figures are vendor-reported (via Rapid7's own announcement) and have not been independently audited; treat as an unverified vendor claim pending third-party validation.
Sources
Alternatives to Kenzo Security
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
7AI
7AI, founded by Cybereason's former CEO and CTO, deploys autonomous AI agents that triage, investigate, and correlate security…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Sevii
CISO ReviewedAgentic AI platform positioning itself around autonomous threat elimination rather than alerting, using AI agents to investigate and…
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…