CALCULATOR

Analyst hours calculator: size your alert queue, then re-rank AI SOC platforms

SHORT ANSWER

Enter your alert volume and how long a full investigation takes, and the calculator shows how many analyst hours the queue needs against the hours you have. Then set how much each criterion matters and which features are must-haves, and the ranking recomputes. With the default weights the ranking matches ours.

By The Alert Desk · AI SOC Compared · Published 2026-09-27 · Updated 2026-10-14

Desk research from public vendor pages; vendor facts read 27 September, 11 October and 13 October 2026; published 27 September 2026, updated 14 October 2026. Editorial assessment; we did not test the products.

Workload

Alerts per dayShare of alerts your team fully investigates today (%)Minutes for one full manual investigationAnalyst hours available for alert work per dayShare of alerts you want fully investigated in future (%)

Weights

Investigates end to end20Autonomy you can dial20Shows its reasoning15Reaches your data sources15Hosting and data handling10Brings SOAR playbooks along10Pricing clarity10

Total weight: 100

Must-haves

Must take response actions itself, with sign-offMust document unattended actions within limitsMust translate existing SOAR playbooksMust offer dedicated or customer-tenant hostingMust publish a pricing unit

Start with your own numbers. If the gap is large, the question is how much of the queue you can hand off, so raise Investigates end to end and Autonomy you can dial. If your auditors will ask how a verdict was reached, raise Shows its reasoning. If you have no SOAR today, set Brings SOAR playbooks along to zero and tick the response must-have.

What does your queue need?

Manual hours per day today: 50.0
Hours available per day: 32
Gap: short by 18.0 hours a day
Hours a day for the future share by hand: 166.7
Full investigations per year: 182,500

How do the platforms rank on your weights?

Re-weighted score = sum of score × your weight ÷ sum of your weights
Rank	Platform	Re-weighted score	Change against default rank	Ladder
1	Mate Security	7.90 / 10	same	Mate Security autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Documented; ACT ON SIGN-OFF: Documented; ACT ALONE, WITHIN LIMITS: Documented.
2	Prophet Security	7.30 / 10	same	Prophet Security autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Documented; ACT ON SIGN-OFF: Documented; ACT ALONE, WITHIN LIMITS: Documented.
3	Torq AI SOC Platform	7.20 / 10	same	Torq AI SOC Platform autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Partial; ACT ON SIGN-OFF: Partial; ACT ALONE, WITHIN LIMITS: Documented.
4	Artemis Security	7.15 / 10	same	Artemis Security autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Partial; ACT ON SIGN-OFF: Documented; ACT ALONE, WITHIN LIMITS: Documented.
5	Dropzone AI	7.00 / 10	same	Dropzone AI autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Documented; ACT ON SIGN-OFF: Partial; ACT ALONE, WITHIN LIMITS: Partial.
6	7AI	6.95 / 10	same	7AI autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Documented; ACT ON SIGN-OFF: Documented; ACT ALONE, WITHIN LIMITS: Documented.
7	Exaforce	6.90 / 10	same	Exaforce autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Partial; ACT ON SIGN-OFF: Documented; ACT ALONE, WITHIN LIMITS: Partial.
8	Conifers CognitiveSOC	6.80 / 10	same	Conifers CognitiveSOC autonomy ladder. TRIAGE: Partial; INVESTIGATE: Documented; SHOW WORK: Documented; ACT ON SIGN-OFF: Documented; ACT ALONE, WITHIN LIMITS: Documented.
9	Intezer	6.40 / 10	same	Intezer autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Partial; ACT ON SIGN-OFF: Partial; ACT ALONE, WITHIN LIMITS: Partial.
10	Vega	5.65 / 10	same	Vega autonomy ladder. TRIAGE: Documented; INVESTIGATE: Documented; SHOW WORK: Documented; ACT ON SIGN-OFF: Not documented; ACT ALONE, WITHIN LIMITS: Not documented.

Pricing units

Mate Security: No pricing unit published. AWS Marketplace list price: $150,000 for a 12-month contract. The listing does not define what the tier, contract or pack covers.
Torq AI SOC Platform: No pricing unit published.
Dropzone AI: AI analysts implied on Dropzone AI's base unit: ceil(182,500 ÷ 4,000) = 46. Dropzone AI publishes the unit, not the price.
Prophet Security: No pricing unit published. No price published; the /pricing address returned not found. A free proof of value is offered.
7AI: No pricing unit published. AWS Marketplace list price: $50,000 for a 12-month contract. The listing does not define what the tier, contract or pack covers.
Conifers CognitiveSOC: No pricing unit published. No pricing page; the /pricing address returned not found.
Intezer: Priced by endpoints with no volume fees, so alert volume does not change the unit. Prices not published.
Exaforce: No pricing unit published. AWS Marketplace list price: $75,000 per 12-month contract. The listing does not define what the tier, contract or pack covers.
Artemis Security: No pricing unit published. No pricing page; Book a Demo only.
Vega: No pricing unit published. No pricing page; Get a demo only.

How the calculator works

Re-weighted score = (DEPTH × w1 + DIAL × w2 + WHY × w3 + REACH × w4 + DATA × w5 + CARRY × w6 + PRICE × w7) ÷ (w1 + w2 + w3 + w4 + w5 + w6 + w7)

Current weights: w1 DEPTH 20, w2 DIAL 20, w3 WHY 15, w4 REACH 15, w5 DATA 10, w6 CARRY 10, w7 PRICE 10

Workload today: manual investigation hours per day = alerts per day × share investigated today × minutes ÷ 60, shown to one decimal. Hours needed to investigate the future share by hand = alerts per day × future share × minutes ÷ 60. Gap = hours needed today minus hours available. These are your own numbers; the calculator does not estimate how much time any product saves.

Full investigations per year at the future share = alerts per day × future share × 365.

Re-weighted score per platform = sum(score × your weight) ÷ sum(your weights), shown to two decimals.

Platforms that fail any checked must-have are moved to the Filtered out list with the reason. The rest are ranked by re-weighted score; equal two-decimal scores share a rank.

Scores never change; only weights and filters do. No cost is computed from any pricing figure.

Scores are an editorial assessment of public vendor pages read on 27 September, 11 October and 13 October 2026. Pricing units and marketplace list prices are as published on those pages.

Frequently asked questions

Does the calculator estimate how much time an AI SOC saves?

No. It sizes your own workload from your inputs and re-ranks platforms on our scores. Vendors publish time-saving figures as their own claims, and we do not turn them into estimates.

Why does Dropzone AI show a number of AI analysts?

Dropzone AI publishes its pricing unit: the base subscription covers up to 4,000 full investigations per year per AI analyst. The calculator divides your yearly investigations by that unit. Prices are not published, so no cost is shown.

Which settings suit a team with no SOAR?

Set Brings SOAR playbooks along to zero and tick Must take response actions itself, with sign-off. With today's data that keeps Mate Security, Prophet Security, 7AI, Conifers CognitiveSOC, Exaforce and Artemis Security.

Is my input stored or sent anywhere?

No input leaves your browser, and nothing is stored: reloading the page restores the defaults.