Run WedgeX yourself.
The full AI SOC platform deployed for your team. Your analysts operate it, the agent runs against your stack, and you stay in command end to end.
Everything WedgeX ships with.
Six components, one product, all sharing the same evidence on the same audit log.
The agent
Autonomous triage on every alert. Investigates end to end, returns a verdict with the full trace.
The copilot
Open a chat on any alert. Same tools, same evidence, same investigation context as the agent.
The audit log
Every step, every tool call, every result on every investigation. Preserved in full, in the order it happened.
Mobile application
Triage queue, alert detail, approvals and chat copilot. The whole workflow, on your phone.
Threat intel
Built-in feeds plus your own intel, correlated against every alert on ingestion.
Extensible by design
Custom connectors, tools and MCP servers. The agent treats them as first-class capabilities alongside the built-in set.
The platforms you already run.
WedgeX queries your SIEMs and EDRs over read-only APIs. Nothing is relocated, nothing is mirrored.
Plus your own connectors, tools and MCP servers, written by your team and treated as first-class capabilities by the agent.
Three places. One product.
A clean topology with one direction of trust: your data stays on your side, decisions stay on your team's.
Where your data lives
- Your SIEMs, EDRs and threat intel sources
- Connected over read-only APIs
- Logs stay where they are. Nothing is mirrored or relocated.
Where the SOC runs
- Hosted in Australia
- Agent, copilot, audit log and mobile
- ISO 27001 and Essential Eight aligned
Where decisions happen
- Web and mobile applications
- Analysts approve every action that changes your environment
- Your processes, your verdict thresholds
Ready to run it yourself?
The AI SOC Platform fits teams who want to operate it themselves. If you want our team to run it for you, see Managed. If you want a safety net for the worst day, see the Incident Response Retainer.