January 15, 2026

© 2026 SOC Prime Inc.

All rights reserved. This product and documentation related are protected by copyright and distributed under licenses restricting their use, copying, distribution, and decompilation. No part of this product or documentation related may be reproduced in any form or by any means without the prior written authorization of SOC Prime. While every precaution has been taken in the preparation of this book, SOC Prime assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice.

With this release, we’ve enhanced team management capabilities for managers. Invited, but yet not yet registered users are now listed in Platform Settings > Team Management, with their email address, role, and status Invited displayed correspondingly. From this page, the managers can also revoke invitations, which updates the status of the user to Invitation Revoked. When an invitation is revoked, the user is automatically notified via email.

With this release, we’ve enhanced email notifications on the Account Settings page by adding a new Notify me when SSO creates a new account toggle. Once turned on, user will receive an email alert whenever a new user account is created via Single Sign-On.

With this latest SOC Prime Platform release, we’ve updated the Search Profiles in Platform Settings. The former Make Default toggle has been renamed to Default on Coverages, and a new Default on Search toggle has been added. With this update, users can mark the corresponding profile as Default on Search, so it is applied by default in Advanced Search for detection searches.

The default Search Profile is not applied to the Advanced Search in cases when navigating via drill-down from Dashboard, Leaderboards, Overview, or Active Threats. When navigating via drill-down from Log Source Coverage or MITRE ATT&CK Coverage, the detections are filtered based on the search profile selected on the Log Source Coverage or MITRE ATT&CK Coverage page.

We’ve added a new Detection Type filter in Advanced Search, helping users find relevant detections in the Platform Repos. Users can filter the detections by selecting the way they’ve been created:

With this release, we’ve introduced a new API endpoint Get /active-threats/get-updates that allows users to retrieve notifications about Active Threats news items based on user permissions. The date_start and date_end parameters should be used to specify the time range for retrieving Active Threats news items.

With the 6.1.4 Platform release, we’ve expanded the list of AI Tasks available in the New Uncoder mode. We’ve introduced the AIDEFEND Framework, enabling users to discover defensive countermeasures to protect AI/ML systems from emerging threats. By using AIDEFEND directly via Uncoder, users can identify AI/ML security threats, select defense techniques, implement secure controls, and plan incident response. Powered by the Artificial Intelligence Defense Framework (AIDEFEND), it leverages 8 key MCP tools that are automatically selected based on user prompts to provide guidance for securing AI/ML systems.

With the latest SOC Prime Platform release, we’ve introduced improvement for translation to the Elastic ES|QL platform. We’ve improved the quality of ES|QL translations by adding double escaping with double \\ for . character.

With this release, we’ve introduced support for a new Google SecOps API, enabling the platform to retrieve event codes during data audits. This enhancement enables blind spot detection based on missing event codes and provides recommendations for event codes that are not currently collected.

In addition to this, we’ve implemented Assets and Accounts count during scans using the new Google SecOps API to improve visibility into coverage and potential blind spots.

With the latest Attack Detective release, we’ve introduced infographic-style Attack Detective reports that provide a clear, comprehensive, visually structured summary of scan results, including spider charts, blind spots, triggered rules, recommendations, and a threat surface overview.

Users can now generate the reports as PDFs directly from multiple places in the interface, making reporting easier and more efficient.

The PDF report can be generated on the Scans > Investigations tab.

Additionally, the Scans page has been updated so that users can generate reports directly from a selected scan via the Scan Overview, Log Sources, and Scan Results tabs.

Once generated, reports can be quickly and easily downloaded from the Reports page, providing users with a comprehensive and visually informative overview.

With the latest release, we’ve enhanced Active Threats functionality on the SOC Prime website for a better user experience. To access the news feed, select Resources > Active Threats from the main website navigation.

We’ve made the following enhancements:

With the latest Platform release, we’ve published a new customer success story with GoSecure, highlighting how SOC Prime helped accelerate detection workflows, improve translation accuracy, cut false positives by 30%, double hunt speed, and strengthen MXDR coverage.

With this release, we’ve enhanced the blog’s UI/UX to deliver a better experience for readers through a set of improvements, including a refined heading structure, multiple language availability, enhanced visual structure and alignment.

With this release, we’ve also improved breadcrumb navigation on the Active Threats page on desktop devices, so that titles of the active threats are fully visible and no longer get cut off.