Vigil SOC is 1.0: Machine Speed Intelligence, Together

Evan Powell

October 28, 2026

We must, indeed, all hang together or, most assuredly, we shall all hang separately. Benjamin Franklin

I could not be more proud of what the Vigil community and DeepTempo are releasing today.

We started Vigil on the sidelines of the RSA conference early this year. Today, just seven months later, Vigil is 1.0.

Wings

Vigil has wings. It must be the most broadly deployed AI-native SOC of our time, and it is just getting started.

Along the way Vigil has:

At the behest of the community, broadened to become a cyber fusion center as well as an AI SOC that extends the value of the systems you already run.
Incorporated autonomic capabilities, such as a loop, a ledger and memory, that allow ongoing improvement in operations.
Attracted 37 contributors and well over 125,000 deployments; almost a third of those deployments have occurred in October alone.
Been adopted by some of the largest corporations and service providers in the world, scaling threat hunting and investigations to an unprecedented extent.
Integrated with many systems of record - and started to emerge as what might be called a System of Learning (more to come on that concept).

Announcements

In addition to shipping Vigil 1.0, we are announcing:

Vigil Assured is now available for customers that want the upstream team at DeepTempo to support them. Assured is the long term support version of Vigil, with pinned releases and a locked down SBOM.
Vigil will follow the pull of the community and become a cyber fusion center, including community contributed threat intelligence management and, in an upcoming release, an automated agentic red team.
Vigil is happy to go home with you as well. The Vigil at Home project, started by DeepTempo's founding forward deployed engineer Alex Margaris, shares a lineage with Vigil but not a code base. Vigil at Home is purpose built to protect your home systems, focusing initially on Mac and Linux users.
The Software Factory that DeepTempo's Director of Platform Sam Armstrong built to accelerate Vigil is now freely available at github.com/Vigil-SOC/vigil-factory. We released the Factory itself in keeping with our pledge to build Vigil in the open, as transparently as possible.

Vigil in use

Just last week many in the broader AI Cyber Alliance came together for a workshop hosted at the SV AIHUB in Menlo Park. This five hour deep dive was on "Agents Hunting Agents." I mention it here because it makes concrete how teams use Vigil: often in conjunction with other cyber solutions, including SIEMs and threat intelligence, and, optionally, the DeepTempo developed LogLM. Existing systems plus Vigil are orchestrated while humans stay on the loop, accelerating the pace of security toward machine speed.

Also last week we released a demo of Vigil protecting critical infrastructure. The video shows Vigil in a complex OT range operated by the NSA-established Technology Advancement Center, finding and responding to attacks that pre-AI cyber systems often fail to see. Thank you to our partners in national security, and especially to the long time operators and technologists at Cloud Current, for your partnership: Protecting OT with LogLM, Vigil and vStrike.

Collective action

As my favorite grey beard start-up veteran Ben Franklin suggests above, sometimes collective action is the only choice. I hope you agree that today's crisis in cyber security is such a time. Vigil is far from the only way the community is rallying to use AI for cyber defense, but it is a notable example.

After all, we know that we need agents for defense, and that to use them effectively there is an enormous amount of undifferentiated heavy lifting to do.

That calls for open source.

For example, every agentic or autonomous SOC needs:

A learning loop, with a ledger and memory, that enables ongoing adaptation to the context in which the system runs
A raft of MCP integrations
Guardrails
Minimum viable agents and workflows
Systems to address the cold start problem

All of these are being built again and again, by in-house AI SOCs and by proprietary AI SOC products from start-ups and major vendors alike. This is a wasteful duplication of effort. We do not have time. Let us collaborate instead.

Call to action

Please support Vigil. Tell your friends. Give it a star. Try it out. We are building DeepTempo for the long haul and rely upon your word of mouth. Open issues. Join the community office hours. For that matter, open epics and watch the Factory code.

And stay tuned for more announcements. Tomorrow we will be talking about a new community initiative, for example. Everyone is welcome. Together we win.