What is Matter of Proof?
An AI investigation layer for security teams — not a replacement for analysts.
Matter of Proof is an AI investigation layer for security operations teams. It helps SOCs triage alerts, collect evidence, connect related activity, recommend next steps, and create documentation — without replacing the analyst and without silently taking destructive actions.
What Matter of Proof does
- Scores incoming alerts with a verdict, confidence and risk number, backed by the underlying evidence
- Correlates related alerts, entities and timelines into a single investigation
- Recommends a next step (investigate, contain, reset credentials, block domain, no action)
- Drafts executive briefs, technical write-ups and compliance evidence packs
- Maintains a full audit trail of every decision, suppression, approval and export
What Matter of Proof does not do
- It does not silently isolate hosts, disable accounts or rotate credentials. High-impact actions require explicit human approval.
- It does not replace the analyst. Verdicts always include the underlying signals so analysts can override.
- It does not store payloads it does not need. Customer-controlled retention applies end-to-end.
Who it is for
SOC analysts, SOC leads, MSSP teams, CISO offices and audit-prep teams who need defensible, evidence-backed decisions at speed.
- Read-only investigation mode
Recommended for initial deployment — Matter of Proof can investigate without write access to any connected tool.
- How evidence-backed triage works
Every verdict ships with the signals behind it: source context, entities, related activity, confidence, risk and what is missing.
- Security and data handling
Least privilege, role-based access, audit logs, encrypted data and no visible secrets.