As the cybersecurity industry is jockeying to build the autonomous Security Operations Center (SOC), Getsoteria.ai is betting the market has been solving the wrong problem. Getsoteria.ai has launched this week with a different proposition, that autonomous security will not reach enterprise scale until organisations can trust AI to operate inside critical environments.
Founded by some of sector’s most influential figures across Asia-Pacific Sean Duca and Peter Molloy, who argues that organisations aren’t holding back because AI can’t make decisions they’re holding back because they can’t trust those decisions inside critical environments.
“Everyone is building the autonomous SOC. Almost nobody has switched it on,” said Duca, Co-Founder and CEO. “The models are good enough. The trust isn’t. We built the layer that lets you finally turn it on.”
The company traces its origins to a conversation between the two founders. Rather than building another managed security service, they asked a broader question, that if everyone believed the autonomous SOC was inevitable, why wasn’t anyone actually deploying one? Their conclusion was that the missing piece was not another AI model, but a control layer capable of explaining, governing and evidencing every automated security decision before action is taken.Getsoteria.ai says every action taken by its platform can be examined, traced and justified, allowing organisations to retain institutional knowledge while providing the governance and accountability required for autonomous operations.
“Autonomy was never the hard part,” Duca said. “Control was and control is a claim until it’s enforced.”
Getsoteria.ai’s approach to governed autonomy is where systems can automate routine security responses while respecting organisational policy and keeping high risk assets under human oversight.
The company says this distinction is paramount as organisations look to accelerate security operations without introducing unacceptable operational risk.
“Being right and being allowed are different things,” Duca added. “A machine can be confident and still have no business acting on a domain controller. We made that distinction structural, so the system only acts where policy allows and never fails open.”
Co-Founder and CRO Peter Molloy believes the market has reached an inflection point.
“Most businesses can’t staff a SOC of their own, and the ones that can still can’t action alerts at machine speed safely,” he said. “We give them governed autonomy, so the routine response happens automatically while critical systems remain human only.”
Rather than replacing existing security investments, Getsoteria.ai says its platform sits above customers’ current technology stack, allowing organisations and service providers to adopt autonomous operations without ripping out existing infrastructure.
“We’re vendor neutral and we sit on top of the tools people already run,” Molloy said. “For partners protecting these businesses, that’s the difference between a nice demo and something they can actually stand behind.”
