Sygnia is scaling its defensive infrastructure to counter the increasing velocity of AI-driven cyber threats through a strategic expansion of its global operational footprint. By establishing new Managed Detection and Response (MDR) Security Operations Center (SOC) hubs in Austin, Texas, and Singapore, the company is implementing a three-region, "follow-the-sun" operating model alongside its existing Tel Aviv operations. This move aims to bolster 24/7 monitoring and operational scalability for its global client base. The expansion coincides with a reported 40% year-over-year increase in incident response projects between H1 2025 and H1 2026.
Sygnia Establishes Three-Region SOC Model
To strengthen its global MDR capabilities, Sygnia is deploying new SOC hubs in Austin and Singapore to complement its established presence in Tel Aviv. This geographic distribution is designed to facilitate a continuous, 24/7 monitoring cycle, providing what the company describes as improved operational scalability and enhanced customer experience for MDR clients. The expansion follows significant growth in Sygnia's recurring business, with the company reporting that its MDR Annual Recurring Revenue (ARR) has grown by 50%. Currently, Sygnia manages more than 350 global clients and processes a volume exceeding 5 billion log items every day. By spreading its operational centers across North America, EMEA, and APJ, the company is positioning itself to provide more consistent coverage across diverse time zones, addressing the need for rapid response in an increasingly interconnected digital landscape where threat actors operate without temporal constraints.
AI-Augmented Investigation and Cloud-Native Visibility
Sygnia is launching an expert-led, AI-powered cybersecurity services platform intended to bridge the gap between automated speed and human judgment. The platform introduces AI-enhanced threat containment, allowing clients to select which response workflows are automated and which remain manual to maintain control over containment speed. A central component of this strategy is a hybrid investigation model that pairs AI-assisted workflows with human-led expertise to prioritize tasks based on business impact and severity. Furthermore, the company is extending its monitoring capabilities into cloud-native AI workspaces through integrations with AWS Bedrock and other AI-specific data sources. This technical expansion targets the growing complexity of AI-driven environments, aiming to provide deeper visibility into emerging data sources. Sygnia is also developing AI-powered workflows for its incident response and proactive security services to improve investigation consistency and accelerate the analysis of complex client environments.
Key Takeaways
- Sygnia is launching new MDR SOC hubs in Austin, Texas, and Singapore to support a three-region, follow-the-sun operating model.
- The company reported a 40% year-over-year increase in incident response projects from H1 2025 to H1 2026.
- New AI-powered capabilities include integrations with AWS Bedrock to extend monitoring into cloud-native AI workspaces.
TechInsyte's Take
In our view, Sygnia’s move to integrate AI with "elite expertise" is a direct response to the reality that pure automation cannot yet navigate the nuances of a high-stakes business crisis. By focusing on a hybrid model—specifically allowing clients to toggle between automated and manual containment—Sygnia is addressing a critical enterprise fear: the loss of agency during an automated response. The expansion into AWS Bedrock integrations is particularly significant, as it signals that the next frontier of cybersecurity is not just defending traditional infrastructure, but securing the very AI environments that enterprises are currently rushing to adopt.
Questions & Answers
How does the new SOC structure impact global service availability?
The establishment of hubs in Austin, Singapore, and Tel Aviv creates a "follow-the-sun" model, which is designed to provide continuous 24/7 monitoring and improved operational scalability across North America, EMEA, and APJ.
What specific technical integrations are being used to secure AI environments?
Sygnia is extending its monitoring capabilities into cloud-native AI workspaces through integrations with AWS Bedrock and other AI-specific data sources to provide visibility into emerging AI-driven environments.
How does the AI platform balance automation with human oversight?
The platform utilizes a hybrid investigation model and AI-enhanced threat containment, which allows clients to decide which specific containment actions are automated and which require manual intervention by expert teams.
What recent growth metrics support Sygnia's expansion?
Sygnia reported a 50% growth in MDR Annual Recurring Revenue (ARR) and a 40% year-over-year increase in the number of incident response projects fielded between H1 2025 and H1 2026.
Source: Sygnia
