Crogl
Crogl is a cybersecurity company that builds an agentic AI platform for autonomous security alert investigation, using a patented neurosymbolic knowledge engine that runs entirely within customer environments and serves enterprise SOCs, MSSPs, defense organizations, and critical-infrastructure operators.
- Company typePrivate
- Founded2025
- HeadquartersBernalillo, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Crogl does
Crogl is a cybersecurity company that builds an agentic AI platform for security operations centers (SOCs). Its platform autonomously investigates security alerts by gathering context, querying existing security tools, and cross-referencing data across SIEMs, EDRs, ticketing systems, and threat advisories, then delivers complete, auditable investigation records for analyst review. The company's core technical differentiator is a patented knowledge engine that analyzes security-relevant data without requiring schema normalization, paired with a neurosymbolic architecture combining knowledge graphs, large language models, and autonomous agents. The platform runs entirely within customer infrastructure — on-premises, in a private cloud, or fully air-gapped — meaning no data leaves the customer environment, which is an architectural property rather than a configuration option.
Crogl serves enterprise SOCs, MSSPs, defense organizations, and smaller organizations that cannot afford traditional enterprise security tooling. Disclosed customers include a U.S. defense agency investigating 1,000+ alerts daily in a classified environment, a Fortune 500 financial institution, and a major U.S. electric utility. The company operates a hybrid go-to-market model: a free, fully functional single-user version launched in May 2026 drives product-led adoption among MSSPs and smaller organizations, while a paid enterprise tier with SSO, RBAC, and multi-user collaboration targets larger organizations. Defense market access is enabled through the DoD CDAO Tradewinds Solutions Marketplace Awardable designation.
Crogl generates revenue primarily through paid enterprise subscriptions, with a freemium acquisition motion. Founded in 2025 by cybersecurity practitioners (Monzy Merza, CEO; David Dorsey, CTO; Brad Lovering, Chief Engineer), the company has raised approximately $30 million in total funding, including a $25 million Series A led by Menlo Ventures in March 2025 with AV8 Ventures and S3 Ventures participating. Crogl is headquartered in Albuquerque, New Mexico, and operates with 11–50 employees.
Crogl firmographics
Firmographics- Name
- Crogl
- Legal name
- Crogl
- Website
- https://crogl.com.
- Company type
- Private
- Founded year
- 2025
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Crogl is a cybersecurity company that builds an agentic AI platform for autonomous security alert investigation, using a patented neurosymbolic knowledge engine that runs entirely within customer environments and serves enterprise SOCs, MSSPs, defense organizations, and critical-infrastructure operators.
- Ownership category
- akta.pro rank
Crogl industry classification
Industry- Product category
- Security Operations (AI SOC) Platform
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)
Keywords
Where Crogl is headquartered
LocationHeadquarters
- HQ city
- Bernalillo
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Crogl business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- Freemium AI SOC Platform: Free enterprise-grade agentic AI platform for security operations offered as single-user deployment. Serves as user acquisition and evaluation mechanism for MSSPs and smaller organizations unable to afford enterprise security tooling.
- Enterprise Multi-User Platform: Paid enterprise version offering multi-user collaboration, single sign-on, and role-based access controls for larger organizations. Targets defense organizations and Fortune 500 enterprises requiring advanced security operations capabilities.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Annual | Free Enterprise-Grade AI SOC Platform - single-user deployment |
| Subscription | Annual | Enterprise Multi-User Platform - for larger organizations |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels6 records
Crogl product offering
Product offeringCore offering
Crogl sells an agentic AI platform for security operations that autonomously investigates every alert, gathering context, querying existing tools, and cross-referencing data across SIEMs, EDRs, ticketing systems, and threat advisories to produce complete, auditable investigations. The platform is delivered as a customer-managed deployment (on-premises, private cloud, or air-gapped) so that no data leaves the customer's environment, and is sold in a free single-user edition and a paid enterprise edition with multi-user collaboration, SSO, and RBAC.
Product overview
Crogl offers a unified AI-powered security operations platform consisting of the core AI SOC Platform, a Free Enterprise version for single-user deployments, and a patented Knowledge Engine. The platform uses a neurosymbolic architecture combining knowledge graphs, large language models, and autonomous agents to automate alert triage, investigation, and documentation. The architecture is customer-managed, running entirely within the customer's infrastructure (on-prem, private cloud, or air-gapped) with no data leaving the environment. The Knowledge Engine enables querying across diverse data sources without schema normalization, while the AI SOC Platform handles autonomous investigation and delivers complete, auditable records to ticketing systems. The Free Enterprise version provides full functionality for single users, while the enterprise tier adds multi-user collaboration, SSO, and role-based access controls.
Differentiator
Problem solved
Functional benefit
Products and services
- Crogl AI SOC Platform An agentic AI platform for security operations that autonomously investigates every alert, gathering context, querying tools, and cross-referencing data across SIEMs, EDRs, ticketing systems, and threat advisories, and produces complete, auditable investigation reports for analyst review. Targeted at enterprise security teams, MSSPs, defense organizations, and critical infrastructure operators.
- Free Enterprise AI SOC Platform A free, fully functional single-user deployment of the Crogl AI SOC platform that organizations can download, deploy, and use to begin threat investigations within minutes. Can run on-premises, in a customer cloud, or in air-gapped environments with no data leaving the environment. Intended for MSSPs and smaller organizations that cannot afford enterprise security tooling.
- Knowledge Engine A patented knowledge engine that analyzes security-relevant data without normalization, reducing the time and effort required for data processing in security operations and improving detection fidelity. Uses knowledge graphs combined with large language models to drive operational outcomes for security teams across SIEM, EDR, ticketing, and data lake sources.
Quantifiable outcome
- Alert investigation rate improved from 37% to 100% for defense agency customer
- +3 more outcomes
Companies that use Crogl
Customer profileNamed customers3 records
Segments4 records
Ideal customer profiles4 records
Crogl technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration9 records
AI capability8 records
Feature4 records
Crogl partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered flagship and core.
- DoD CDAO Tradewinds Solutions MarketplaceflagshipCrogl was designated 'Awardable' on the DoD CDAO Tradewinds Solutions Marketplace, enabling direct engagement with defense organizations for AI and data analytics solutions. The designation confirms Crogl's capabilities to meet security and operational standards, including operation in classified environments.
- SplunkcoreTechnology integration partnership. Crogl integrates with Splunk SIEM on day one without schema normalization, allowing organizations to query data in native format.
- Microsoft SentinelcoreTechnology integration partnership. Crogl integrates with Microsoft Sentinel on day one without schema normalization, allowing organizations to query data in native format.
- CrowdStrikecoreTechnology integration partnership. Crogl integrates with CrowdStrike EDR on day one without schema normalization, enabling autonomous investigation of alerts across the security stack.
Scale indicators6 records
Recent moves6 records
Expansion highlights5 records
Crogl competitors and assessment
Company assessmentDirect peers
- Prophet Security: AI SOC agent platform that autonomously investigates and triages alerts, similar to Crogl's core offering. Direct competitor in the AI SOC agent category targeting enterprise SOC teams.
- Dropzone AI: Autonomous AI SOC analyst that investigates alerts end-to-end without playbooks. Closely comparable in product, target buyer (SOC teams / MSSPs), and autonomous-investigation value proposition.
- Radiant Security: AI-driven SOC analyst that automates alert triage and investigation. Directly competes with Crogl for the same AI SOC agent budget line at mid-market and enterprise security teams.
- Intezer: Autonomous SOC and alert investigation platform using AI for triage, threat analysis, and response. Comparable autonomous-investigation product positioning and similar enterprise security buyer.
Broad incumbents
- Microsoft Security Copilot: Microsoft's generative AI assistant for security operations, integrated across Defender, Sentinel, and Intune. The dominant incumbent AI SOC offering bundled into the Microsoft enterprise security estate.
- CrowdStrike (Charlotte AI): Charlotte AI is CrowdStrike's agentic AI for SOC workflows, layered on the Falcon platform. A core incumbent competitor with massive enterprise footprint and bundled endpoint + identity data.
- Palo Alto Networks (Cortex XSIAM): AI-driven SOC platform that unifies SIEM, XDR, and SOAR with autonomous capabilities. Competes with Crogl for SOC modernization budgets in large enterprises.
- SentinelOne (Purple AI): Purple AI is SentinelOne's generative AI security analyst, integrated into the Singularity platform. A broad incumbent competitor offering AI SOC capabilities bundled with endpoint and cloud security.
Emerging players
- Torq: AI-driven security automation and hyperautomation platform for SOC workflows. Comparable buyer (SOC / security teams) and adjacent in automating investigation and response, though more workflow-automation than alert-investigation focused.
- Tines: No-code automation platform widely adopted by SOC teams for alert triage and response workflows. Adjacent rather than direct — competes for the same SOC automation budget with a workflow-first (vs. investigation-first) approach.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Crogl social profiles
Digital presenceCrogl compliance and trust
Trust signalCompliance2 records
Crogl financial estimates
Financial estimateRevenue estimate
Valuation estimate
Crogl leadership team
Management profileNumber of profiles
Profiles3 records
Crogl funding detail
Funding detailFunding overview
Funding rounds2 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Crogl M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Crogl
What does Crogl do?
Crogl sells an agentic AI platform for security operations that autonomously investigates every alert, gathering context, querying existing tools, and cross-referencing data across SIEMs, EDRs, ticketing systems, and threat advisories to produce complete, auditable investigations. The platform is delivered as a customer-managed deployment (on-premises, private cloud, or air-gapped) so that no data leaves the customer's environment, and is sold in a free single-user edition and a paid enterprise edition with multi-user collaboration, SSO, and RBAC.
Is Crogl a public or private company?
Crogl is a private company. It is classified as venture growth investor backed and is currently operating.
When was Crogl founded?
Crogl was founded in 2025. It employs 11 to 50 people.
Where is Crogl based?
Crogl is headquartered in Bernalillo, United States, in the North America region.
How does Crogl make money?
Two revenue lines are on record. Freemium AI SOC Platform is the primary driver. The others are enterprise Multi-User Platform.
Who are Crogl's main competitors?
Direct peers on record are Prophet Security, Dropzone AI, Radiant Security and Intezer. Broad incumbents are Microsoft Security Copilot, CrowdStrike (Charlotte AI), Palo Alto Networks (Cortex XSIAM) and SentinelOne (Purple AI). Emerging players are Torq and Tines.
Does Crogl have an API?
No public API is recorded for Crogl.
What industry is Crogl in?
Crogl's product category is Security Operations (AI SOC) Platform. Its primary akta.pro industry code is HDAEANAG, Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII). Its NAICS code is 5132 and its SIC code is 7372.