Fig Security

Fig Security is a cybersecurity company focused on Security Operations Resilience — a capability designed to keep SOC (Security Operations Center) detection and response functions operational through both planned and unplanned changes in the security infrastructure.

The company addresses two core problems that affect SOC effectiveness:

• Drift (unplanned changes): Upstream changes in data pipelines or infrastructure that silently break detection rules and automations without alerting security teams, leading to coverage gaps.
• Planned changes: Deliberate initiatives to improve SecOps coverage or infrastructure that carry risk of breaking existing detections if not carefully managed.

Fig's platform provides the following capabilities:

• Drift Detection: Identifies the moment a detection or response workflow breaks due to unplanned changes.
• Drift Repair: Traces the root cause of a break, suggests a fix, tests it, and supports automated deployment upon user approval.
• Change Modeling: Allows teams to simulate planned initiatives and assess their impact before pushing to production.
• Production Deployment: Provides a centralized interface for deploying changes with version control and rollback support.

The platform integrates with a range of security and data infrastructure tools, including Elasticsearch, AWS S3, Databricks, Google SecOps, and CrowdStrike Falcon, among others. It supports open-source infrastructure as well.

Fig Security targets enterprise security operations teams, with noted customers including CISOs from Fortune 500 companies, AppLovin, Elastic, and First Citizens Bank. The company was a finalist in the RSA Innovation Sandbox competition. Fig Security Inc. is incorporated in the United States.