Overview
Arcanna-AI - Trustworthy AI for Modern SOC
Discover how Arcanna.ai is transforming mission critical operations with Decision Intelligence, an AI-powered approach that enhances human decision-making in mission critical operations.
Arcanna.ai is a decision-intelligence platform built for security operations teams and MSSPs that need to scale alert triage without sacrificing control or trust.
Arcanna applies analyst-trained decision models to incoming SIEM and SOAR alerts, reproducing each team's historical decision patterns at machine speed. This enables SOCs to safely auto-close 80-95% of false-positive alerts while preserving evidence, consistency, and accountability.
The platform includes policy-gated automation, explainable outcomes, and continuous feedback loops that detect drift and pause autonomy when risk increases. Every automated action is fully traceable and audit-ready, supporting compliance, investigations, and analyst review.
Deployed via BYOL in the customer's AWS environment, Arcanna integrates with existing security stacks to reduce alert backlog, improve MTTR and SLA performance, and increase analyst capacity without adding headcount.
Highlights
- Automated alert triage at scale: Arcanna safely auto-closes 80-95% of false-positive alerts in seconds by applying analyst-trained decision models to every SIEM and SOAR alert.
- Trustworthy automation by design: Policy-gated autonomy, explainable decisions, rollback controls, and full evidence trails ensure every automated action is transparent, reviewable, and audit-ready.
- Built for enterprise environments: Deploy via BYOL in your AWS account and integrate with existing SIEM, SOAR, and security workflows to scale analyst capacity without changing tools or processes.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
No refund
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
https://docs.arcanna.ai/docs/release_notes/v1.74.0
Features & improvements:
- New: Assistant configuration is now presented in a form-based format for improved usability..
- New: Ability to provide written feedback on assistant responses, besides thumbs up/down.
- Improvement: Added missing link/breadcrumb between edit and sessions page from agentic workflows
- Improvement: Added several improvements to assistant chat regarding like/dislike, timestamp and other visual elements
- Improvement: Events can now be filtered in the explorer page based on the agentic workflows that interacted with them
- Improvement: Sample values from the selected decision points will be displayed up front before saving new buckets configuration, for a better clarity as to what the model will use in training
- Improvement: Migrated inline code blocks to code blocks integrations
Bug fixes:
- Fixed an issue where sessions name of agentic workflows could not be renamed
- Fixed an issue where sometimes the buckets we're not displayed after a trained model was imported into the pipeline
https://docs.arcanna.ai/docs/release_notes/v1.74.1
Bug fixes:
- Fixed an issue where Agentic Workflows could contain spaces in their names which would lead to errors when running said Agents
Additional details
Usage instructions
After deploying the AMI, you can login to the web interface by using "admin" as the username, and your <instance-ID> as the password. The web interface is available on the IP address of your instance, on the default port (tcp/443) or (tcp/80). To access it, point your browser to http://ip.add.re.ss (where ip.add.re.ss is the IP address of your instance). Please make sure to configure your security groups so that they only allowed traffic from the desired IP addresses (the default security groups will allow from anywhere).
This Arcanna instance includes a basic license that supports up to two use cases, allowing you to explore its features. To upgrade to a full license, please contact our sales team at https://www.arcanna.ai/contact .
If you want to connect by SSH, you can use the key pair selected when the instance is created. The ssh default username is "ubuntu".
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.