Decision intelligence

What actually differs?

Compare documented operating boundaries, not incomparable vendor outcome claims. NONE_FOUND is not NO, and UNKNOWN is not negative evidence.

System	Evidence maturity	Autonomy	Action authority	Lifecycle	Freshness	Decision difference
Charlotte AI and AgentWorks CrowdStrike	EARLY	UNKNOWN	UNKNOWN	GA	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Cisco Instant Attack Verification Cisco	EARLY	UNKNOWN	UNKNOWN	UNKNOWN	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Conifers CognitiveSOC Conifers.ai	EMERGING	UNKNOWN	UNKNOWN	GA	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Cortex AgentiX Palo Alto Networks	EARLY	UNKNOWN	APPROVAL-GATED	GA	FRESH	The documented boundary is APPROVAL-GATED with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
D3 Morpheus D3 Security	EMERGING	UNKNOWN	UNKNOWN	GA	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Dropzone AI SOC Analyst Dropzone AI	EARLY	UNKNOWN	UNKNOWN	GA	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Google Detection Engineering Agent Google	EMERGING	ASSISTIVE	READ-ONLY	UNKNOWN	FRESH	The documented boundary is READ-ONLY with ASSISTIVE operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Google Threat Hunt Agent Google	EARLY	UNKNOWN	UNKNOWN	PUBLIC_PREVIEW	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Google Triage and Investigation Agent Google	EARLY	UNKNOWN	UNKNOWN	PUBLIC_PREVIEW	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
MDASH Microsoft	EARLY	UNKNOWN	UNKNOWN	PRIVATE_PREVIEW	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Project Perception Microsoft	EARLY	UNKNOWN	UNKNOWN	LIMITED_PUBLIC_PREVIEW	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Purple AI Agentic Investigation SentinelOne	EMERGING	UNKNOWN	UNKNOWN	GA	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Security Alert Triage Agent Microsoft	EARLY	UNKNOWN	UNKNOWN	GA	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Microsoft Security Copilot Agents Microsoft	EARLY	UNKNOWN	UNKNOWN	GA	FRESH	The documented boundary is UNKNOWN with UNKNOWN operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.
Simbian AI NetSecOps Agent Simbian	EARLY	HIGH-AUTONOMY	BROAD-WRITE / NOT-BOUNDED	GA	FRESH	The documented boundary is BROAD-WRITE / NOT-BOUNDED with HIGH-AUTONOMY operation. This describes authority and initiation, not effectiveness. No qualifying independent validation is recorded.

Evidence quality

33 governed evidence records

0 currently qualify as independent evidence.

Read the derivation methodology