Cotool
-
Logan Carmody, Eddie Conk and Max Pollard
-
2025
-
San Francisco, CA
-
2-10 Employees
-
$7.9M, Seed
Overview
Cotool is an AI operating system for security operations teams, deploying agents for detection, automated response and threat hunting across existing SIEM, endpoint, identity and cloud tools.
Key Technology Insights
Rather than writing rules, engineers build agents in natural language across their stack, spanning the full detection-to-response lifecycle. Each run feeds outcomes back into detection, so the system improves over time. It layers onto existing tools rather than replacing the SIEM and uses federated search to avoid costly log duplication.
Industry Application
The core uses are detection and alert triage, automated incident response that compresses 30–60-minute tasks to seconds, and IOC-driven threat hunting, with agents correlating across SIEM, endpoint, identity, cloud and ticketing tools. Early users report 70% less investigation time.
Strategic Perspective
Cotool lets security teams build fully customisable, composable AI agents in natural language that act autonomously across their entire security stack, tuning their own detection rules, self-improving after every run. Its advantage is layering on existing tools rather than ripping them out.

