Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents)
Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) (Ontinue (Ontinue AG)) and Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) (Upwind) are both listed in the Security category of Agent Index. They share no framework tags in our dataset.
| Field |  Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) |  Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) |
|---|---|---|
| Vendor | Ontinue (Ontinue AG) | Upwind |
| HQ | Switzerland · Europe | United States · North America |
| Primary category | Security | Security |
| Also listed in | Security | Security |
| Summary | Zurich-headquartered managed detection and response provider for Microsoft Defender and Sentinel whose ION MXDR service uses a team of AI agents to run autonomous Tier 2-level incident investigations (aggregate telemetry, form and test hypotheses) before handing a step-by-step summary to an Ontinue Cyber Defender. | Specialised AI agents inside Upwind's runtime-first cloud security platform: Blue investigates threats to a verdict, Red proves which risks are exploitable, Green finds root-cause fixes and opens PRs, coordinated by Choppy. |
| Framework tags (Agent Index) | — | — |
| Frameworks (vendor-claimed) | — | — |
| Capabilities / tasks | security operations, alert triage, case investigation, incident response, threat detection | cloud security, incident response, exposure management, remediation |
| Pricing (as published) | Not published | Not published |
| Pricing model | quote | quote |
| Primary source | https://www.ontinue.com/first-to-launch-agentic-ai-mdr/ | https://www.upwind.io/agentic-security |
| Last checked | 2026-10-19 | 2026-10-18 |
| Official site | https://www.ontinue.com/first-to-launch-agentic-ai-mdr/ | https://www.upwind.io/agentic-security |
Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.
Also in this use case
Other verified listings that share a task tag or use-case group with Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) or Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents). Open a pair page or the use-case table — this is not a ranking.
- Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) — AI SOC agent inside Blackpoint's managed ITDR service that autonomously contains high-confidence credential attacks on Microsoft 365 and Google Workspace accounts: it suspends the account, forces a password reset, ends active sessions and logs its reasoning, and escalates anything below its confidence threshold to a human SOC analyst. Generally available since July 8, 2026. · Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) pair comparison
- Bricklayer AI security agents (agentic platform for the AI security workforce) — Agentic cybersecurity platform that deploys, coordinates and governs teams of role-based and tool-specialist AI agents to triage alerts, investigate incidents, run threat-intelligence and threat-hunting work and track vulnerability remediation inside analyst-approved procedures, with every agent action auditable. · Bricklayer AI security agents (agentic platform for the AI security workforce) pair comparison
- Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) — Oslo-built agentic cloud operations platform whose agents find cloud security and compliance issues, investigate across cloud state and IaC, write the Terraform/Bicep fix, validate it with a plan and policy checks and open a pull request, then verify the fix after it lands. The Compliance Remediation Agent works from Prowler, Security Hub, Defender and Checkov findings against CIS, SOC 2, ISO 27001 and NIS2. Autonomy is set by policy. · Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) pair comparison
- Command Zero Agent Zero (autonomous security analyst) — Autonomous and AI-assisted SOC investigation platform from Austin, Texas. Its LLM agent, Agent Zero, investigates alerts end to end across identity, endpoint, cloud, email and SaaS, auto-closes routine cases with documented reasoning, and escalates the rest with a replayable chain of evidence for analysts to confirm or override. · Command Zero Agent Zero (autonomous security analyst) pair comparison
Use-case comparisons
- AI SOC and security-analyst agents — 37 listings (Security operations, alert investigation and threat detection)
- Cloud security (CNAPP) AI agents — 8 listings (Cloud and container security posture, exposure and remediation)
Related
- Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) alternatives
- Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) alternatives
- Best security AI agents
More Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) comparisons
- 7AI agentic security platform vs Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel)
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel)
- Adaptive Security Agentic Email Security and Phish Triage vs Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel)
- Aikido Attack AI Pentesting vs Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel)
- AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel)
More Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) comparisons
- 7AI agentic security platform vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents)
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents)
- Adaptive Security Agentic Email Security and Phish Triage vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents)
- Aikido Attack AI Pentesting vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents)
- AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents)