Anvilogic

Anvilogic scores 5.48 of 10, seventh of the 12 profiled, in band C with Sigma and pySigma and Detecteam. It began as a detection engineering platform for Splunk and Azure and now sells itself as an Agentic SecOps Platform. Its docs sit behind a login, so nearly every cell rests on product pages and scores partial.

Rubric total

5.48 of 10, seventh of 14 scored, seventh of 12 profiled

Matrix score

6.5 of 33 (0 documented, 13 partial, 20 not documented)

Rule health

0 documented, 3 partial of 5 matrix rule-health columns

Ownership

Independent company. No acquisition or rebrand found on the vendor's pages or in one news search. The vendor now calls itself the Agentic SecOps Platform; its March 2026 RSA release used the phrase AI SOC platform. anvilogic.com read 2026-11-03

Website

anvilogic.com

What Anvilogic is

Anvilogic began as a practitioner-built detection platform for Splunk and Azure. It now sells an agent-based layer on top of a customer's existing SIEM or data lake and calls itself the Agentic SecOps Platform, a name in use from July 2026 (vendor site, read 2026-11-03). Its detection engineering pages describe reusable low-code detection components and an ATT&CK view with Validated, Deployed and Gap states.

The docs sit behind a login, so the scores rest on product pages, which cap most cells at partial. The platform page says Detection-as-Code with version control and shows no repo sync, pull-request flow, CLI or API. Detections deploy to Splunk, Azure Sentinel, CrowdStrike NG-SIEM and Elastic (vendor claim, read 2026-11-04).

Vendor description: Anvilogic sells an agent-based layer that runs on top of a customer's existing SIEM, data lake or storage. Its agents cover data onboarding, search, detection engineering and investigation. Blueprints chain the agents into workflows that run on demand or on a schedule. Blueprints became generally available on 2026-07-30 with release 8.0. anvilogic.com read 2026-11-03 vendor claim

How Anvilogic scores on the rubric

5.48 of 10 across eight weighted criteria. It sits in band C with Sigma and pySigma and Detecteam: totals within 0.25 are a band, not a ladder. Each score has its reason and the page it was read from. The rubric explains the bands.

Anvilogic on the eight rubric criteria. Part = weight times score over 100; the parts sum to the total.

The 33 capabilities for Anvilogic

documentedpartialnot documented

Notes and sources for each cell are on the group pages: Languages, Source control and CI, Testing, Coverage analytics, Rule health, Library.

Where Anvilogic is strong

• The free tier is listed at USD 0 per month with a 30-day free trial. Paid packages are contact sales. anvilogic.com read 2026-11-03
• ATT&CK technique coverage shows Validated, Deployed and Gap, and Maturity Scoring is said to highlight gaps and recommend what to build next (vendor claim, product page). anvilogic.com read 2026-11-03
• The Armory is described as 3,500+ detections for any SIEM and data lake, with new content weekly (vendor claim, no dated count). anvilogic.com read 2026-11-03

Where Anvilogic is behind

• The page says Detection-as-Code with version control but describes no repo sync, pull-request flow, CLI or API. docs.anvilogic.com redirects to a login. anvilogic.com read 2026-11-04
• Detections are said to be validated and pushed live within an afternoon, with no testing method described. anvilogic.com read 2026-11-04
• Teams monitor coverage and detection health on one dashboard, but no metric definitions, noisy-rule or drift detail is shown. anvilogic.com read 2026-11-04

What only Anvilogic publishes

Anvilogic called itself an AI SOC platform in its RSA 2026 release in March and has used the name Agentic SecOps Platform since July 2026. anvilogic.com read 2026-11-03

Pricing as published for Anvilogic

Annual subscription. The free tier is listed at $0 per month with a 30-day free trial. The paid packages (Detect as the base, Triage and AI Insights as add-ons) are contact-sales only, so no paid price is public. anvilogic.com read 2026-11-03

Published prices, read dates beside each.

Named customers of Anvilogic

Names below are as the source page lists them.

Customers named on public pages. Every name is a vendor claim from the page cited in its row.

Recent releases and news for Anvilogic

• 2026-07-30 Anvilogic 8.0 release: Blueprints generally available to all customers. Per a search-result summary. Blueprints are described as the orchestration layer of the platform. Read from search summary; the vendor page for 8.0 is a webinar listing. anvilogic.com read 2026-11-03 vendor claim
• 2026-07-28 Blueprints general availability and Federated Search powered by Anvilogic Compute. Per a search-result summary of the release. Federated Search makes more of the customer's existing security data available to the platform. The release was not read in full. anvilogic.com read 2026-11-03 vendor claim
• 2026-07 Scheduled Blueprints now available. Banner on the blog page, with no date. The first post on the blog lists Scheduled Blueprints as a feature. anvilogic.com read 2026-11-03 vendor claim
• 2026-03-23 Anvilogic Launches Blueprints Workflow Automation for AI SOC. Blueprints lets analysts write automation in natural language and deploy it the same day. Blueprints can run with a person in the loop or on a schedule. The release lists 100+ third-party integrations, including Jira, ServiceNow, Slack and VirusTotal. The release gives no measured result. anvilogic.com read 2026-11-03 vendor claim
• 2026-03 Partnership: from a SentinelOne alert to endpoint evidence without leaving Anvilogic. Blog post listed under Partnerships. No date shown on the page. anvilogic.com read 2026-11-03 vendor claim

Claims Anvilogic makes about itself

Each figure is the vendor's. The evidence grade is defined on the rubric page: A measured by a third party with the method published, B vendor-measured with sample and method, C vendor figure with no method, D figure with no source.

Vendor claims with the evidence grade and who measured.

Shortlist Anvilogic when

• You run Splunk, Sentinel, Elastic or CrowdStrike NG-SIEM and want a layer that deploys across them.
• You want a free tier and a 30-day trial before a sales call.
• You can ask for the login-gated docs in a proof of concept and check git, testing and health claims there.

Verdict on Anvilogic

Seventh of 12 at 5.48, in band C with Sigma and pySigma (5.50) and Detecteam (5.26), capped at partial because its docs are not public.

Compare Anvilogic

Alternatives to Anvilogic. Head-to-head diffs: SOC Prime, Panther, Sigma and pySigma, Detecteam, Elastic Security, Splunk Enterprise Security (Cisco), Sekoia.io, Hunters, Google Security Operations, Microsoft Sentinel, Mate Security.