Imperum
Autonomous SOC
Company
News
Your SOC Co-pilot

Ask. Investigate. Act.

Virtus is the always-on copilot by every analyst's side, turning plain-language questions into clear, sourced answers and real actions, right inside your SOC.

Three Modes

Three search modes, one assistant.

Three modes for every analyst question. One conversational interface.

Natural-language

nl

Ask in plain English. The assistant turns your question into the right search across your data and shows you the answer.

"What changed on the finance subnet in the last 6 hours?"

Semantic

semantic

Search by meaning, not exact words. Surface related incidents, runbooks, and reports even when the wording is different.

"Find runbooks similar to last quarter's MFA-fatigue incident."

Chat that takes action

agent

An AI agent that takes action for you: find endpoints, start hunts, collect evidence, run live response. Sensitive moves wait for your approval.

"Collect a memory image from host-NYC-04 and open a case."
Grounded reasoning

Answers grounded in your data, not the model's memory.

Every answer is built from your own data and the connections between it, with sensitive details hidden before anything leaves the platform.

InputYour question
01

Find facts Your data

Pulls the right knowledge.

Searches your runbooks, incidents, and threat intel to find the facts that matter for this question.

02

Connect dots Connections

Connects every dot.

Adds relationships across hosts, users, alerts, and cases so the answer sees the whole picture.

03

Protect privacy Privacy

Shields what's sensitive.

Hides sensitive details: hostnames, emails, IP addresses, API keys, before anything leaves the platform. Restored on your screen.

OutputGrounded answer
Agent reasoningAttacker techniquesYour knowledge baseConnected contextCombined searchPrivacy maskingFollow-up questionsForensics tools
Pre-built starters

Start with one click.

Pre-built starter queries cover the questions analysts ask most.

Window
InvestigateSelect a host to investigate10 starters
01High Severity Alerts (24h)
02Top Alert Sources Today
03Failed Logins
04Critical Events Across All Sources
05Overdue Cases
06Executive Summary of Cases This Week
07Auto-Escalated by Virtus Triage
08Recent Triage Decisions and Outcomes
09Attacker techniques seen recently
10Top Techniques This Week
See it in action

Cut investigation time from hours to seconds.

Ask in plain language. Get a clear answer with its sources and the exact next step, so your analysts close cases faster, with evidence they can stand behind.

01 · ASK

Ask

Analyst types: "Did we see lateral movement on host-NYC-04 in the last 24 hours?"

mode: nl · turn: 1
02 · PRIVACY

Privacy

Sensitive data hidden before the question ever leaves the platform.

10 kinds of personal data · hidden
03 · RETRIEVE

Retrieve

Pulls the right runbooks, prior investigations, and past triage notes so every answer is grounded in your team's own runbooks, not the model's guess.

searches your own runbooks
04 · TRAVERSE

Traverse

Walks the entity graph to surface every related alert, user, and host the analyst would otherwise miss. Maps the full blast radius in one pass.

maps related users and hosts
05 · TOOL-CALL

Tool-call

Queries logs and pulls live endpoint timelines on the analyst's behalf. Every action is gated by approval, signed, and audited end to end.

27+ tools · approval required · audited
06 · ANSWER

Answer

A clear verdict with cited evidence and a one-click jump to the graph defensible in a review, exportable to a case, ready to act on in seconds.

streamed · cited · audited · case-ready
Ready when you are

From alert noise to validated action with the analyst at the helm.

See the Virtus Assistant in your environment, on your data, with your privacy controls in place.

Imperum runs on your own servers, in the cloud, or fully isolated, your data stays yours.