Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
Legion is a browser-native AI SOC analyst that learns what your analysts do and scales them. It trains within your organization, observing your team's investigations, learns their patterns, and helps improve them. Then, it automates them at your own pace, at any scale, and without requiring any integrations or APIs.
Highlights
Highlighted by the publisher on AWS Marketplace.
A lightweight browser extension that watches how analysts actually work, captures the decision paths and tool usage, and then builds automation tailored to your processes.
Phased autonomy in three modes: "Learning Mode" (learning analyst workflows), "Guided Mode" (AI does investigation with human oversight), and "Autonomous Mode" (fully automated investigations and workflows).
Reduce MTTR/MTTA by up to 90% in some cases, saving north of 1,700 hours of investigative time, and the equivalent of 9 FTEs
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Plans and pricing as listed
1 listed- Units
Refund terms
As stated by the publisher on AWS Marketplace.
No refund unless defined in contract
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.