Attic IVON (Agentic MDR for Microsoft 365)

Vendor: Attic Security · HQ: Netherlands · Category: Security

Last verified 18 Oct 2026 · Added 18 Oct 2026 · 5 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

IVON is Attic Security's AI SOC agent inside its agentic MDR service for Microsoft 365. Attic says IVON triages, investigates and contains identity signals across Microsoft Defender, Sentinel and Entra ID. Each alert gets a verdict (true positive, false alarm, benign or undetermined) with confidence and evidence. IVON proposes remediation, which Attic executes after customer sign-off, or immediately for action types the customer has pre-approved. Cases are escalated to human analysts, and there is a full audit trail. Attic claims mitigation in about 6 minutes on average (vendor figure). The service targets SMBs and offers a 14-day free trial.

Frameworks

No framework tags verified yet.

Pricing (as published)

Published: the agentic MDR page lists €6 per user per month, decreasing with more users. The pricing page lists plans from €27/month on annual billing, with incident-handling add-ons (+2x IVON incident handling from €30.15, +5x from €34.20). Prices exclude VAT. Check the pricing page for current amounts.

India relevance

Relevant to CERT-In incident detection and response capability building; not a CERT-In compliance product by itself.

Tasks

security-operationsalert-triageincident-responsethreat-detectionremediation

Sources

1. atticsecurity.com/en/agentic-mdr/ (primary)
2. atticsecurity.com/en/ivon/
3. atticsecurity.com/en/blog/attic-launches-ivon/
4. atticsecurity.com/en/pricing/
5. atticsecurity.com/en/about/

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email sales@heritageservices.online. See our methodology.

Use-case comparisons

• AI SOC and security-analyst agents — 26 verified listings (Security operations, alert investigation and threat detection)

Compare Attic IVON (Agentic MDR for Microsoft 365) with

• 7AI agentic security platform vs Attic IVON (Agentic MDR for Microsoft 365)
• Abnormal AI Security Mailbox (Abnormal AI for Government) vs Attic IVON (Agentic MDR for Microsoft 365)
• Aikido Attack AI Pentesting vs Attic IVON (Agentic MDR for Microsoft 365)
• Andesite Human-AI SOC (Azimuth for Government) vs Attic IVON (Agentic MDR for Microsoft 365)
• Attic IVON (Agentic MDR for Microsoft 365) vs AWS Continuum for penetration testing (formerly AWS Security Agent)
• Attic IVON (Agentic MDR for Microsoft 365) vs CloudSEK AI Agents
• Attic IVON (Agentic MDR for Microsoft 365) vs Conveyor
• Attic IVON (Agentic MDR for Microsoft 365) vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR)
• Attic IVON (Agentic MDR for Microsoft 365) vs CrowdStrike Charlotte AI
• Attic IVON (Agentic MDR for Microsoft 365) vs Cyble Blaze AI

Alternatives

• 7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
• Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
• Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
• Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
• AWS Continuum for penetration testing (formerly AWS Security Agent) — AWS frontier agent (formerly AWS Security Agent) that runs on-demand penetration tests of your applications with tailored multi-step attack scenarios, reproducible proof and ready-to-implement fixes, billed per task-hour.
• CloudSEK AI Agents — Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows.

See all Attic IVON (Agentic MDR for Microsoft 365) alternatives →

Stay updated