Sekoia.io

Sekoia scores 3.46 of 10, eleventh of the 12 profiled, in band E with Hunters. Its docs describe native Sigma rules, SOL queries, rule testing on historical data and a rule lifecycle. The score rests on a pass where several docs paths returned 404, so many cells read not documented instead of not offered.

Rubric total

3.46 of 10, thirteenth of 14 scored, eleventh of 12 profiled

Matrix score

11.0 of 33 (6 documented, 10 partial, 17 not documented)

Rule health

1 documented, 3 partial of 5 matrix rule-health columns

Ownership

Independent company

Website

sekoia.com

What Sekoia.io is

Sekoia.io is a European security platform with five modules: Sekoia Defend (SIEM), Intelligence, Digital Risk, Reveal and Elevate (vendor site, read 2026-11-03). Its docs describe native Sigma YAML rules, including event_count, value_count and temporal correlation, and SOL (Sekoia Operating Language) queries that run as scheduled detections (Sekoia docs, read 2026-11-03).

The weighted score rests on the first scoring pass, when docs.sekoia.com returned 404 on several paths. Cells for Sekoia read not documented where the page was not read. They do not say the feature is absent. A re-read is due at the next refresh on 2027-02-03. Sekoia raised a EUR 26 million Series B on 2025-04-09; reported figures vary.

Vendor description: Agentic AI security operations platform. Offers a SIEM (Sekoia Defend), threat intelligence, digital risk protection, asset discovery and an agentic SOC analyst. sekoia.com read 2026-11-03 vendor claim

How Sekoia.io scores on the rubric

3.46 of 10 across eight weighted criteria. It sits in band E with Hunters: totals within 0.25 are a band, not a ladder. Each score has its reason and the page it was read from. The rubric explains the bands.

Sekoia.io on the eight rubric criteria. Part = weight times score over 100; the parts sum to the total.

The 33 capabilities for Sekoia.io

documentedpartialnot documented

Notes and sources for each cell are on the group pages: Languages, Source control and CI, Testing, Coverage analytics, Rule health, Library.

Where Sekoia.io is strong

• The Sigma Rules page documents native Sigma YAML, including event_count, value_count and temporal correlation. docs.sekoia.com read 2026-11-03
• Rule testing evaluates a Sigma pattern against historical data through a Test pattern step, so a rule can be tried before it goes live. docs.sekoia.com read 2026-11-03
• A rule-creation tutorial documents a POST to /v1/sic/conf/rules-catalog/rules, so rules can be created through the API. docs.sekoia.com read 2026-11-03

Where Sekoia.io is behind

• No git sync or CLI for rules is documented on the pages read, so a repository workflow means building around the API. sekoia.com read 2026-11-03
• No failed-rule alerting, field drift alert or per-rule runtime telemetry appears. The lifecycle states describe maintenance, not health. docs.sekoia.com read 2026-11-03
• No pricing model is stated on the home page and no pricing page was reached. sekoia.com read 2026-11-03

What only Sekoia.io publishes

Sekoia's alert similarity groups repeat matches rather than flooding the alert list, which is its documented answer to a rule that fires too often. docs.sekoia.com read 2026-11-03

Pricing as published for Sekoia.io

No pricing model is stated on the home page read. No pricing page was reached in this run. sekoia.com read 2026-11-03

Named customers of Sekoia.io

Names below are as the source page lists them.

Customers named on public pages. Every name is a vendor claim from the page cited in its row.

Recent releases and news for Sekoia.io

• 2025-04-09 Sekoia raises EUR 26 million Series B. Raised from Revaia with UNEXO and existing investors Bright Pixel Capital, Omnes Capital and Bpifrance; total funding EUR 60 million. Primary source corrects the earlier note that Bright Pixel led it. sekoia.com read 2026-11-04 vendor claim

Claims Sekoia.io makes about itself

Each figure is the vendor's. The evidence grade is defined on the rubric page: A measured by a third party with the method published, B vendor-measured with sample and method, C vendor figure with no method, D figure with no source.

Vendor claims with the evidence grade and who measured.

Shortlist Sekoia.io when

• You want a SIEM that runs Sigma rules natively and you work in Europe.
• You are comparing the Verified Rules library against a vendor that counts its content.
• You will ask for the pages the scoring pass could not read before you decide.

Verdict on Sekoia.io

Eleventh of 12 at 3.46, in band E with Hunters (3.44), scored on a pass where several docs paths returned 404.

Compare Sekoia.io

Alternatives to Sekoia.io. Head-to-head diffs: SOC Prime, Anvilogic, Panther, Sigma and pySigma, Detecteam, Elastic Security, Splunk Enterprise Security (Cisco), Hunters, Google Security Operations, Microsoft Sentinel, Mate Security.