No article in the knowledge graph for Sekoia yet.
Who is Sekoia?
Sekoia is a France-based cybersecurity company that provides a security operations platform combining security information and event management (SIEM), extended detection and response (XDR), and cyber threat intelligence for security operations centers.
- SIEM capabilities for log collection, correlation, and alerting
- XDR coverage across endpoint, network, identity, and cloud telemetry
- Cyber threat intelligence and detection content
- Security orchestration, automation, and response (SOAR) workflows
- Detection engineering and investigation tools for security operations center teams
Show more
More About
Sekoia positions its platform for security operations centers, including internal SOC teams and managed security service providers. The platform gathers logs and telemetry from endpoints, network devices, identity systems, and cloud services, then applies detection rules to identify suspicious activity. Detection content is commonly mapped to the MITRE ATT&CK framework, a widely used knowledge base of adversary tactics and techniques, which allows analysts to relate alerts to documented attack behaviors.
The platform's architecture follows the cloud-delivered SIEM and XDR model used across the security operations segment. Incoming events are normalized into a common data model before correlation, which supports cross-source searches and consistent rule logic. Threat intelligence exchange commonly relies on standards such as STIX for describing threat information and TAXII for transporting it between systems, and these standards are part of the threat intelligence functions associated with the platform.
Solutions in this category include SIEM, XDR, and SOAR products from multiple vendors. Organizations evaluating this segment typically compare log ingestion coverage, detection content libraries, investigation workflows, and integration with existing ticketing and response tools. The platform's stated purpose is to give analysts a single environment for alert triage, investigation, and response, which reduces the number of consoles that analysts must monitor during an incident.
From a business perspective, security operations functions handle detection, investigation, and response for enterprise environments, and tooling in this area affects mean time to detect and mean time to respond. Sekoia's offerings address these functions through SIEM, XDR, threat intelligence, and automation capabilities.
In directory positioning, Sekoia is classified as a company in the cybersecurity sector. Its current solution areas center on security operations, SIEM and XDR, and threat intelligence, serving enterprises, public sector organizations, and managed security providers that operate security operations centers.
Our description of Sekoia. Updated October 2026.
