Legion is now available on Crowdstrike marketplace
Crowdstrike's marketplace. Easily center your investigations within Falcon without the need to navigate to third party threat intel or internal systems. Simply capture your current procsesses and allow Legion to run your investigations your way, and write back to Falcon
Chrome
Gemini
Cloud
Marketplace
SecOps
Threat Intel
AI is drastically scaling the number and novelty of threats, and security teams need to keep up.
Security teams are overwhelmed by repetitive workflows, distracting them from the more complex high-value threats.
Enterprises need accountability and predictability, but upkeeping playbooks is expensive and tribal knowledge is often siloed.
Teams hesitate to adopt externally trained models which can't follow the complexities inherent in a modern enterprise.
The only AI that learns to walk before it runs — and only runs when you say so. Legion lives in the browser, exactly where your analysts work, and builds its understanding from your team's recorded investigation sessions, the decisions they make, the paths they take, and the patterns that emerge across real cases in your environment.
Legion’s browser extension observes and learns from analyst activity in real time, capturing and structuring your organization’s tribal knowledge into dynamic playbooks.

Legion executes complete workflows directly through analysts’ browsers, maintaining full human oversight and control at every step.

When the time comes, Legion assumes its own operational workload—proactively automating investigations and engaging your team only when human input adds value.



Zero integrations
Works w/ any tool via Chromium
Installs in minutes
Learns your unique processes
Shows every step in advance
Built for complex enterprise environments
Reduces mean time to respond from minutes to seconds
Frees analysts to focus on complex, high-priority threats
Standardizes top analyst best practices across the team
Every alert handled with uniformity
Bridges the gap with MDR/MSSP teams
Eliminates manual playbook upkeepSee how Legion and Google Cloud can reduce response times by up to 90% — without a single integration.
Schedule a Demo