Legion x Google
Legion is now a Google Ecosystem Partner. Combining browser-native AI security automation with the scale, security, and procurement simplicity of Google Cloud.
Better Together
Legion provides a way for enterpises to take advantage of Google security tools, like never before. Installed in Chromium, Legion leverages Gemini's capabilities to automate security work that is run on GCP, feeds back into SecOps while utilizing GTI tools. Now availble on the Google Cloud Marketplace, procurement is easier than ever, billing simplified and your spend can count towards your annual Google commitment.
Chrome
Gemini
Cloud
Marketplace
SecOps
Threat Intel
Security Teams Are Stretched to the Brink
AI is scaling threats
AI is drastically scaling the number and novelty of threats, and security teams need to keep up.
Manual Triage & Slow Time to Value
Security teams are overwhelmed by repetitive workflows, distracting them from the more complex high-value threats.
Unstandardized Investigation Processes
Enterprises need accountability and predictability, but upkeeping playbooks is expensive and tribal knowledge is often siloed.
Distrust of Black-Box AI
Teams hesitate to adopt externally trained models which can't follow the complexities inherent in a modern enterprise.
AI that shadows your processes, captures your tribal knowledge, and always follows your lead.
The only AI that learns to walk before it runs — and only runs when you say so. Legion lives in the browser, exactly where your analysts work, and builds its understanding from your team's recorded investigation sessions, the decisions they make, the paths they take, and the patterns that emerge across real cases in your environment.
Legion’s browser extension observes and learns from analyst activity in real time, capturing and structuring your organization’s tribal knowledge into dynamic playbooks.
Legion executes complete workflows directly through analysts’ browsers, maintaining full human oversight and control at every step.
When the time comes, Legion assumes its own operational workload—proactively automating investigations and engaging your team only when human input adds value.
Our Technology Ecosystem
How We Work with Google
Legion is deeply integrated with Google's product suite to protect your organization across every surface.
Google Chrome
Legion installs as a Chromium browser extension allowing seamless performance with no APIs, no integrations; running directly inside the browsers where your analysts already work.
Google Gemini
Legion is powered by Gemini, using Google's frontier AI models to analyze workflows, understand enterprise context, reason through investigations, and drive autonomous threat investigation and response.
Google Cloud
Built on Google Cloud infrastructure, Legion inherits enterprise-grade security, scalability, and compliance giving SOC teams a trusted foundation for AI-leveraged security automation.
Google Marketplace
Legion is now available on Google Cloud Marketplace, enabling easier procurement, simplified billing, and immediate deployment for Google Cloud customers with spend counting towards your annual commitments
Google SecOps
Legion integrates seamlessly with Google SecOps, automating the repetitive investigation, and writing back without replacing or reconfiguring your existing setup, and allowing you to center your investigations in SecOps.
Google Threat Intel
Legion leverages Google Threat Intelligence to enrich automated investigations with real-time context, enabling faster, higher-confidence responses to emerging threats and access to market leading practices
Four Ways Legion Security Transforms Your SOC (and wider security teams)
Immediate Time to Value — Zero Integrations
Zero integrations- Works w/ any tool via Chromium
- Installs in minutes
Build Gradual AI Trust
- Learns your unique processes
- Shows every step in advance
- Built for complex enterprise environments
Scale Security Expertise & Efficiency
- Reduces mean time to respond from minutes to seconds
- Frees analysts to focus on complex, high-priority threats
- Standardizes top analyst best practices across the team
Consistency Across Your Entire Ecosystem
- Every alert handled with uniformity
- Bridges the gap with MDR/MSSP teams
- Eliminates manual playbook upkeep