Ridge IT Cyber Launches Kairos AI SOC to Enhance Threat Detection
News related to:Ridge IT Cyber · 2 min read
Ridge IT Cyber, a Tampa-based managed security service provider, has launched Kairos AI SOC, a new platform designed to enhance threat detection and response across client environments. The service aims to address the growing challenge of uninvestigated security alerts and the rapid movement of attackers within networks.
According to the Ponemon Institute’s 2026 State of SecOps Report, commissioned by Crogl, 63% of daily security alerts go uninvestigated by surveyed teams. This statistic highlights the significant gap in security operations that Kairos AI SOC seeks to bridge. The report, based on a survey of 649 IT and IT security practitioners in North America, underscores the need for more efficient and effective threat detection mechanisms.
Kairos AI SOC is designed to return an evidence-backed verdict in approximately three minutes and send isolation commands in under one minute after a threat is confirmed. These figures are platform design targets rather than service-level guarantees, and actual results may vary based on the environment, telemetry coverage, and the type of threat. The platform collects raw telemetry, including logs and other activity data, from a client’s existing security tools in a data lake operated by Ridge IT Cyber. This allows for comprehensive investigations that can examine underlying activity, even events that did not trigger an alert.
When an attack is confirmed in one client’s environment, Kairos distributes a detection for that attack across the Kairos client base. The platform also searches each client’s available historical telemetry for earlier signs of the same activity, with a lookback of up to 12 months. Only de-identified indicators, such as file hashes, IP addresses, or behavioral patterns, are shared between organizations to ensure privacy and security.
Two AI agents support the process: Phage, the threat-hunting agent, develops detections from threat intelligence and confirmed investigations, then tests them against historical data and simulated attacks before deployment. Leuko, the investigation agent, traces indicators across affected hosts and reconstructs the attack chain.
Kairos requires two models to independently reach the same conclusion. Software then verifies that every cited log exists, and verdicts that fail verification are referred to a human analyst. The AI agents never act directly on client systems. Separate automation carries out containment only within limits each client sets, and anything outside those limits goes to a human for approval.
The service operates 24 hours a day and integrates with more than 100 security tools. Ridge IT Cyber states that Kairos has no data-ingestion or token fees. The launch coincides with InfoSec World 2026, which runs from October 12 to 14 in Orlando. Ridge IT Cyber is providing live Kairos demonstrations at Booth 101 through the close of the show. The platform was recently honored in the cybersecurity category of the Tampa Bay Business Journal Inno Awards.
Ridge IT Cyber, which has appeared on the Inc. 5000 for four consecutive years and the Inc. Regionals: Southeast list for three consecutive years, is a company that protects more than 700 organizations and 3.5 million users in 160+ countries. Its services include Zero Trust architecture, AI SOC, managed detection and response, managed endpoint security, CMMC compliance, and IT management. The independently funded company was the highest-ranked managed security service provider on the Inc. 5000 in 2023 and 2024.