Sekoia Announces Self-Hosted SOC Platform for Air-Gapped Environments

Jul 23, 2026 · Original article ↗

Summary

Sekoia is rolling out a self-hosted version of its SOC platform for large organizations needing data sovereignty or air-gapped operations. It launches with core Defend features, with additional capabilities planned for 2026 and 2027.

Key points

The platform is designed for regulated, critical-sector organizations and networks without external connectivity.
Customers deploy and operate it on their own infrastructure using signed binaries, Docker images, Helm charts, and a dedicated CLI.
Weekly threat intelligence and detection rule updates are intended to support air-gapped systems.
The initial release includes core Defend capabilities; feature parity and additional modules will roll out progressively through late 2026 and 2027.
The service requires at least 5,000 protected assets or 500 GB of daily data ingestion, plus a dedicated team or trusted MSSP.
Sekoia says it has onboarded its first users and plans to roll out the platform over the coming months.

Article Details

Event Type: Sekoia announced the launch of a self-hosted deployment model for its security operations platform, designed for high-security and regulated environments.
Impact: Organizations can run Sekoia's core detection, triage, and automation capabilities within their own infrastructure, including isolated or air-gapped networks with no external connectivity. Initial availability includes core Defend features, with additional capabilities planned to roll out progressively in late 2026 and 2027. The offering targets large-scale operations protecting at least 5,000 assets or ingesting 500 GB of data per day and requires a dedicated, certified internal team or a trusted MSSP.