Snapshot
Continue to About ↓- What it does
- Surf AI is an agentic security-operations platform that connects to a company's existing scanner, identity, cloud, HR and IT systems, builds a context graph of assets, owners and dependencies, and uses AI agents to route findings to the right owner, obtain approval, and execute fixes where APIs support it.
More detail
- It is positioned as the operational layer between detection and confirmed remediation, not a replacement for detection tools.
- Best for
- Mid-to-large enterprises and Fortune 500-scale security teams with large vulnerability and misconfiguration backlogs who already run a mature scanner stack and standard ITSM plus Slack or Teams workflows.
More detail
- CISOs who want to operationalize proactive hygiene across identity, cloud, SaaS and data rather than add another detection layer.
- Pricing
- Pricing is not disclosed publicly: there is no pricing page, rate card, published tier, free tier or trial.
More detail
- Access is negotiated through an Order (order form, quote, purchase order or statement of work) under Surf's EULA, so the platform fee and contract term are set per contract and amounts are unk
- Main limitation
- Small teams, individual evaluators or buyers wanting self-serve signup, a free tier or published pricing, since entry is a demo-led enterprise sales process.
More detail
- Buyers looking primarily for new detection capability, on-premises deployment, or publicly documented APIs and compliance certifications before purchase conversations.
- Record
- Living and monitored
- Reviewed
- Evidence
- Public web research
- Machine access
- Structured profile ↗
About
- Surf AI is an agentic security-operations platform that connects to a company's existing scanner, identity, cloud, HR and IT systems, builds a context graph of assets, owners and dependencies, and uses AI agents to route findings to the right owner, obtain approval, and execute fixes where APIs support it.
- It is positioned as the operational layer between detection and confirmed remediation, not a replacement for detection tools.
What it helps with
- Remediation lags behind AI-speed attacks because the operational step between finding an issue and closing it is manual.
- Scanner-owner suggestions are low-confidence because scanners lack HR, access and organizational context.
- The same issue arrives duplicated from multiple scanners, creating noise and conflicting tickets.
- No follow-through layer exists to chase confirmations, track closure and escalate stalled findings.
- Zero-day triage waits on enriched CVE scoring instead of starting at first publication.
- Identity, cloud, SaaS and data hygiene backlogs accumulate, including dormant accounts, over-permissioned identities, CM
Capabilities
A practical view of what is available and where limitations apply.
| Offering | Available | Detail |
|---|---|---|
| Business Context Graph | Yes | Connects assets, identities, permissions, behavior, org structure, ownership and dependencies into a living graph. |
| Specialized AI agents | Yes | Purpose-built agents for identity, cloud, SaaS, IT, data and security domains, operating within defined permissions, policies and guardrails. |
| Scanner integrations | Yes | Documented integrations with Wiz, Tenable, Qualys, Rapid7, CrowdStrike, Microsoft Defender for Cloud, Cyera, Upwind and Palo Alto; Surf states it adds no new detection layer. |
| Cross-vendor finding deduplication and owner resolution | Yes | Consolidates findings from multiple scanners into one finding, owner and ticket, with confidence signals that improve over time. |
| Ticketing and owner outreach | Yes | Creates context-rich tickets in existing ITSM and contacts owners via Slack or Teams, with escalation and recorded declines as confirmed exceptions. |
| API-based remediation execution | Limited | Executes changes such as tightening security groups, rotating keys and IAM cleanup only where APIs support it and only after owner approval. |
| Audit trail and reversibility | Yes | Surf states every action is logged, every decision explained and every change reversible, described as compliance-ready from day one. |
| Zero-day response workflow | Yes | Tracks public vulnerability sources at or near first publication, maps affected assets and blast radius, and confirms ownership before action. |
| Public technical documentation or API reference | Unknown | No public FAQ, product documentation, API reference or status page was found; the EULA references separate Related Documentation that is not publicly linked. |
| On-premises or self-hosted deployment | No | Documented as a cloud SaaS platform; no on-premises or self-hosted option is described. |
Bot trust
How confidently AI systems can verify this profile from public evidence.
—of 100
ChatGPT—/100
Claude—/100
This profile has not completed a Bot Score assessment yet.
Evidence
Where this record came from, when it was reviewed, and how confidently it can be used.
- Verification
- Scribble researched these facts from the linked public sources.
- The owner has not manually confirmed every field.
- Last reviewed
- Primary source
- surf.ai
Technical profile details
Record ID
e8143793-cfab-4bde-aff2-9b3293d990c9Canonical URLhttps://profiles.scribble.network/listing/surf-ai-e8143793