Each colour maps a published value to the exact source passage used to support it. Only bounded excerpts are public; administrators can inspect the complete captured source.
Title
Vega's cyber defense platform returns 67% of analysts' time with Claude
…ere Ask questions about this page Copy as markdown Case study | Claude Platform Vega's cyber defense platform returns 67% of analysts' time with Claude Try Claude Industry: Cybersecurity Company size: Startup Product: Claude Agent…
Description
Vega, an agentic cyber defense platform used by Fortune 200 companies, global banks and healthcare providers, built an agentic detection-triage-investigation-optimization loop that runs Claude directly on security data where it lives, avoiding costly SIEM ingestion, delivered via Amazon Bedrock including an EU-resident deployment in Frankfurt for GDPR compliance. Across production deployments, customers reclaim roughly 67% of analyst time, complete investigations up to 44 times faster at 82% lower cost than legacy SIEMs, and one Fortune 500 insurer cut mean time to triage from 25 minutes to under 3 minutes.
…mpanies, global banks, and leading healthcare providers. The Vega platform runs an agentic cyber defense loop of detection, triage, investigation, and optimization directly on security data where it lives, without ingestion or centralization, with Claude as a reasoning engine behind it. With Claude, Vega: Completes inve…
…Vega The outcome Two-thirds of analyst time back Across production deployments, customers reclaim roughly 67% of analyst time, complete investigations up to 44 times faster, and pay up to 82% less for data than legacy SIEM ingestion. One Fortune 500 in…
Company
Vega
…IEMs Cut triage from 25 minutes to less than 3 minutes at a Fortune 500 company Vega is an agentic cyber defense platform for enterprises, including Fortune 200 companies, global banks, and leading healthcare providers. The Vega platform runs an agentic cyber defense loop of detection, triage, inve…
Industry
Cybersecurity
…yber defense platform returns 67% of analysts' time with Claude Try Claude Industry: Cybersecurity Company size: Startup Product: Claude Agent SDK Claude Platform Partner: AWS Lo…
Region
North America
…ty Company size: Startup Product: Claude Agent SDK Claude Platform Partner: AWS Location: North America Completes investigations up to 44 times faster with 82% lower costs than legacy…
Problem
Most large enterprises have security data spread across dozens of tools and cloud environments, but ingesting everything into a SIEM is often too complex and cost-prohibitive at enterprise scale, so security teams typically ingest only the fraction they can afford and everything outside it becomes a blind spot. For one top-four global bank, ingesting visibility into Amazon VPC Flow Logs, AWS CloudTrail, and Microsoft 365 telemetry into a legacy SIEM would have cost an additional $6 million.
…verything into a security information and event management (SIEM) platform, but this is often too complex and cost-prohibitive at enterprise scale. Security teams typically ingest only the fraction they can afford, and everything outside it becomes a blind spot. That can make it difficult to…
…VPC Flow Logs, AWS CloudTrail, and Microsoft 365 telemetry sat out of reach, as ingesting it into a legacy SIEM would have cost an additional $6 million. Claude on Amazon Bedrock Build innovative AI applications with safer systems f…
Solution
Vega runs an agentic cyber defense loop of detection, triage, investigation, and optimization directly on security data where it lives, without ingestion or centralization, using Claude as the reasoning engine. Vega built on Anthropic's Agent Skills format to create detection skills, an open standard letting cyber defense engineers codify their triage/investigate/optimize judgment for every alert, with engineers signing off on every change. Each pipeline layer is matched to the Claude model tier that fits it, with the deepest reasoning reserved for confirmed alerts and lighter/faster tiers handling high-volume log analysis and summarization. Inference runs through Amazon Bedrock with zero data retention, no training on customer data, and VPC endpoints, including a dedicated EU control plane in Frankfurt for GDPR data-residency requirements.
…nce exactly where it’s needed across Haiku, Sonnet, and Opus," Rozen explained. Vega matches each layer of the pipeline to the Claude model tier that fits it: the deepest reasoning goes to confirmed alerts, where the stakes are highest,…
…arrive. Running it in production: Amazon Bedrock, EU residency, and resilience Inference reaches customers through Amazon Bedrock, with zero data retention, no training on customer data, VPC endpoints keeping traffic off the public internet, and pass-through pricin…
Technology
Claude Agent SDK, Claude Platform, Amazon Bedrock
…#x27; time with Claude Try Claude Industry: Cybersecurity Company size: Startup Product: Claude Agent SDK Claude Platform Partner: AWS Location: North America Completes investigations up to 44 times fa…
Business value
Across production deployments, customers reclaim roughly 67% of analyst time, complete investigations up to 44 times faster, and pay up to 82% less for data than legacy SIEM ingestion. One Fortune 500 insurer cut mean time to triage from 25 minutes to under 3, and a top-four global bank gained the $6 million worth of telemetry it previously couldn't afford. The platform completes a scan across more than 1 billion CloudTrail logs spanning 17 AWS regions in 41 seconds, against a 30-minute manual baseline.
…Vega The outcome Two-thirds of analyst time back Across production deployments, customers reclaim roughly 67% of analyst time, complete investigations up to 44 times faster, and pay up to 82% less for data than legacy SIEM ingestion. One Fortune 500 insurer cut mean time to triage from 25 minutes to under 3, an…
…reviously couldn't afford. Underneath those numbers sits the full picture: The Vega platform completes a scan across more than 1 billion CloudTrail logs spanning 17 AWS regions in 41 seconds, against a 30-minute manual baseline, ensuring frontier AI can reason across the entire environment, rather than a s…
Headline outcome
…legacy SIEMs Cuts triage from 25 minutes to 3 minutes for a Fortune 500 company Reclaims roughly 67% of cyber defense engineering team’s time The challenge Security teams could defend and reason across only what they coul…
Applicable regulations
General Data Protection Regulation (GDPR)
…ns with compliance, privacy, and data sovereignty requirements in every region. When a customer needed EU data residency for GDPR, Vega stood up a dedicated control plane in Frankfurt, running Amazon Bedrock's EU-hosted Claude models, in under three weeks. C…
Use case type
Fraud and anomaly detection
…ly, the right depth at every layer Vega set out to build agentic cyber defense: agents that detect cyberattacks, then triage, investigate and optimize themselves against the whole environment. The team chose Claude to power those agents in production. “As an AI-native co…
Business functions
Risk & Fraud
…yber defense platform returns 67% of analysts' time with Claude Try Claude Industry: Cybersecurity Company size: Startup Product: Claude Agent SDK Claude Platform Partner: AWS Lo…
AI capabilities
Agentic AI
…nies, global banks, and leading healthcare providers. The Vega platform runs an agentic cyber defense loop of detection, triage, investigation, and optimization directly on security data where it lives, without ingestion or centralization,…
