SCALR AI

SCALR AI is a multi-agent security operations workbench from Security Risk Advisors that automates incident triage, enrichment, threat hunting, vulnerability management and phishing analysis. It carries no licence fee — customers deploy it into their own Azure tenant and pay only Microsoft's standard compute rates, which makes it aimed squarely at SOC leaders priced out of the 70-plus commercial SOC AI platforms now on the market.

SCALR AI, announced on 24 August 2026 by Philadelphia-based Security Risk Advisors, is a multi-agentic workflow engine for security operations, distributed through the Azure Marketplace with a $0 licence fee and no usage limits. Rather than a chatbot bolted onto a SIEM, it is positioned as an agentive workbench where agents run as digital workers triggered by incidents, events or schedules; CTO Mike Pinch frames the distinction as agents that respond to events "not prompts," producing results that persist beyond an individual operator. It ships with functioning incident triage, enrichment, escalation and closure workflows plus an AI-driven quality review pass, and teams compose additional multi-agent workflows from agents, tools and Model Context Protocol servers instead of hand-building each automation. The platform is model-agnostic and selects a model per task rather than routing everything through one expensive frontier model, and it exposes cost visibility per workflow, per agent and per model. Critically, it deploys into the customer's own private Azure tenant, so security telemetry and workflows never enter shared SaaS infrastructure — the same custody argument SRA made with VECTR, its free purple-team benchmarking platform now nine years old. CEO Tim Wainwright pitched the licence-free model explicitly against procurement fatigue, arguing there have never been 70 credible choices for anything in cyber and that marketing budgets should not decide the winner. SRA, founded in 2010 with roughly 287 staff and operations across the USA, Ireland and Australia, also sells SCALR XDR, a security data lake and 24x7 monitoring service, and SCALR Sight for vulnerability and cloud policy monitoring.

Category

Governance & Security

Pricing

Free, Usage-based

Target Market

CISOs, SOC Managers, Detection Engineers, Security Architects, CIOs

Deployment

Cloud-only, Self-hosted

Founded

2010

Headquarters

Philadelphia, United States

Team Size

201-500

• ✓
  Multi-agent workflow engine

  Teams compose agents, tools and MCP servers into workflows rather than hand-building each security automation from scratch.

• ✓
  Built-in incident triage and enrichment

  Ships functioning triage, enrichment, escalation and closure workflows out of the box, so the platform is useful before any customisation.

• ✓
  AI-driven quality review

  A built-in review pass checks agent output, addressing the consistency problem that undermines trust in automated triage decisions.

• ✓
  Per-task model selection

  Selects an appropriate model for each task instead of routing every query through one high-cost frontier model, which is what keeps the compute bill down.

• ✓
  Private Azure tenant deployment

  Runs entirely inside the customer's own Azure subscription so security data and workflows never enter shared SaaS infrastructure.

• ✓
  Per-workflow cost visibility

  Reports spend per workflow, per agent and per model, so a SOC can see which automations are economic before scaling them.

• •
  Tier 0 alert triage

  Agents perform first-pass triage, enrichment and intelligent routing so human analysts receive contextualised incidents rather than raw alert queues.

• •
  Phishing report analysis

  Reported messages are automatically analysed, enriched with threat intelligence and dispositioned, removing one of the highest-volume manual SOC tasks.

• •
  Threat hunting campaigns

  Scheduled multi-agent workflows execute hunt hypotheses across telemetry on a recurring basis instead of depending on analyst availability.

• •
  Vulnerability management triage

  Agents correlate scanner findings with asset and exposure context to prioritise remediation, cutting the queue a vulnerability team works manually.

• •
  Evaluating agentic SOC tooling

  Because there is no licence cost, teams can run the platform on real production alerts before committing budget to a commercial competitor.

The software licence genuinely costs nothing and carries no stated usage limits, but that is not the same as free to run: customers pay Microsoft directly for the Azure compute their workflows consume, at standard rates, and absorb the deployment and operations effort themselves. SRA argues the total lands below rival platforms' combined licence plus consumption fees because SCALR AI picks a cheaper model per task; that comparison is the vendor's own and no independent cost benchmark has been published.

This page was written from 7 sources, 4 on domains other than sra.io.

1. 1.sra.io — press release security risk advisors launches scalr ai as a vendor
2. 2.sra.io — scalr aivendor
3. 3.securityboulevard.com — security risk advisors launches scalr ai as a free soc ai pl
4. 4.lastwatchdog.com — news alert sra makes soc ai license free customers pay only
5. 5.cioinfluence.com — security risk advisors launches scalr ai as a free soc ai pl
6. 6.mychesco.com — philadelphia cybersecurity firm offers ai platform free
7. 7.sra.io — sra.iovendor