Fig Security

We build software that helps security operations teams understand whether their detection and response systems still work as infrastructure, rules, automations, and integrations change. Fig was created by engineers with experience across Google SecOps, Siemplify, and Cymulate, who had seen how upstream changes can silently break security workflows without producing an obvious warning. Our goal is straightforward: give SecOps teams a clearer view of their security data flows and help them resolve failures before those failures become operational blind spots.

Our platform supports both unplanned drift and planned security initiatives. It detects when a change breaks a detection or response flow, traces the cause, suggests and tests a repair, and can deploy the approved fix. For planned changes, teams can model an initiative, simulate its effect, verify it, and deploy it with version control and rollback support. The product is also evolving around AI agents that work directly with security analysts and detection engineers, including for investigating coverage, authoring and testing detection logic, and tuning noisy alerts. We are building Fig so that SOCs can remain effective, understandable, and resilient as their environments change.