# Jutsu

> Jutsu is a cybersecurity and SOC 2 readiness platform for startups and growing technology companies. It monitors connected cloud, identity, GitHub, and Windows host activity around the clock, uses AI agents to investigate and help respond to threats, and turns that security work into SOC 2 evidence.

- Cybersecurity for startups: Jutsu monitors the sources a team connects. Documented connections are Google Cloud, Google Workspace, GitHub, Windows hosts, Cloudflare, Vercel, Railway, and Wazuh.
- SOC 2 readiness: Jutsu records monitoring, investigation, and response activity and exports it as evidence. It is not an auditor and does not guarantee an audit outcome.
- AI agent runtime security: Jutsu does not offer AI agent runtime security today. It is on the roadmap: the goal is to bring agent activity into the same security operations workflow Jutsu already runs for people, infrastructure, and applications.

## Overview
- [Jutsu homepage](https://jutsu.ai): what Jutsu is, what it monitors, SOC 2 readiness, pricing summary, and FAQ

## Products
- [Products overview](https://jutsu.ai/products): the four Jutsu products
- [Jutsu](https://jutsu.ai/products/platform): Detect, investigate, triage, respond, and report with AI agents.
- [Red Team](https://jutsu.ai/products/red-team): MITRE ATT&CK attack simulations that prove your detections work.
- [Exposure](https://jutsu.ai/products/exposure): See what attackers see, an external security assessment in minutes.
- [Firehose](https://jutsu.ai/products/firehose): Red team on steroids, synthetic attack traffic at SIEM-breaking scale.

## Solutions
- [Solutions overview](https://jutsu.ai/solutions): what the Jutsu platform is used for
- [Cybersecurity for startups](https://jutsu.ai/solutions/cybersecurity-for-startups): Monitor cloud, identity, code, and endpoints without building a security team.
- [SOC 2 for startups](https://jutsu.ai/solutions/soc-2-for-startups): Get SOC 2 ready with evidence that comes from real security monitoring.
- [Autonomous SOC](https://jutsu.ai/solutions/autonomous-soc): AI agents run the SOC workflow end to end. Analysts keep the critical decisions.
- [AI alert triage](https://jutsu.ai/solutions/ai-alert-triage): Every alert classified, enriched, and correlated before an analyst opens it.
- [AgentSOAR](https://jutsu.ai/solutions/ai-soar): The SOAR built into Jutsu: AI decides the response, AgentSOAR runs it, with revert.
- [Wazuh AI SOC](https://jutsu.ai/solutions/wazuh-ai-soc): AI triage, correlation, and response for Wazuh alerts. Keep Wazuh, add the SOC.
- [AI SOC platform comparison](https://jutsu.ai/solutions/ai-soc-platform-comparison): Jutsu against Torq, Cortex XSIAM, and Charlotte AI: what we document, and what to ask.

## Pricing
- [Pricing](https://jutsu.ai/pricing): plans and tiers (Free, Startup, Growth, Enterprise)

## Integrations
- [Integrations](https://jutsu.ai/integrations): data sources and connectors, each labelled available now or on the roadmap

## Company
- [About](https://jutsu.ai/about-us): mission and company overview
- [Team](https://jutsu.ai/team): leadership and founders
- [Supporters](https://jutsu.ai/supporters): backers and programs

## Resources
- [FAQ](https://jutsu.ai/faq): frequently asked questions
- [Blog](https://jutsu.ai/blog): security news and security operations guides

## Documentation
- [Getting Started](https://jutsu.ai/docs)
- [Introduction](https://jutsu.ai/docs/introduction): Security operations teams typically juggle multiple disconnected tools -- a SIEM for log collection, a separate SOAR for response, external threat intelligence…
- [Onboarding Flow](https://jutsu.ai/docs/onboarding-flow): Open the Jutsu sign-up page. Enter your full name, work email, and a password with at least 6 characters, then select Create account.
  - [Your Account](https://jutsu.ai/docs/setup/your-account): Settings controls your account profile, timezone, password, and notification preferences. Access it by clicking the Settings icon at the bottom of the left sid…
  - [Organizations](https://jutsu.ai/docs/setup/organizations): Click your organization name at the bottom left of the sidebar. A popover appears showing all organizations you belong to, with the currently active one marked…
  - [The Pipeline](https://jutsu.ai/docs/orientation/the-pipeline): By the time something reaches your queue, a chain of AI agents has already run a full investigation. Understanding what each agent does helps you read the plat…
  - [Dashboard](https://jutsu.ai/docs/orientation/dashboard): The Dashboard is the first screen after login and your daily starting point. In under a minute you can see how busy today is, whether anything critical is open…
  - [Alerts](https://jutsu.ai/docs/operations/alerts): Click any row in the Alerts list to open the Alert Detail. This is the full output of the AI pipeline for that specific event.
  - [Cases](https://jutsu.ai/docs/operations/cases): A case is a formal human investigation task. Jutsu creates one automatically when the AI escalates an alert it could not confidently resolve. Cases are your pr…
  - [Incidents](https://jutsu.ai/docs/operations/incidents): An incident is what happens when the AI's Incident Correlation engine detects that multiple alerts belong to the same attack campaign. A single alert is one da…
  - [Events](https://jutsu.ai/docs/operations/events): Events are the raw, non-alert log entries received directly from your connected data sources. Every login attempt, authentication failure, network connection,…
  - [AgentSOAR](https://jutsu.ai/docs/defenses/agentsoar): AgentSOAR is the response automation engine built into Jutsu. It lets your team execute defensive actions directly against your connected cloud infrastructure…
  - [Assets](https://jutsu.ai/docs/defenses/assets): Assets is the inventory of every system, server, host, and endpoint Jutsu knows about. It builds automatically from connected data sources and can be supplemen…
  - [Copilot](https://jutsu.ai/docs/tools/copilot): Copilot is Jutsu/AgentSOC's built-in AI assistant. Ask it security questions in plain English: what a specific threat means, what a MITRE technique is, how to…
  - [Reports](https://jutsu.ai/docs/tools/reports): Reports generates and manages security digest reports covering your alert and case activity over any selected time window. Use them for weekly team reviews, le…
  - [Jutsu API](https://jutsu.ai/docs/tools/jutsu-api): Everything you do in Data Sources can be done from your own tooling instead. The Jutsu API lets a provisioning script, a CI job, a Terraform local-exec block o…
  - [Troubleshooting](https://jutsu.ai/docs/reference/troubleshooting): Why is my alert showing a low confidence score?
  - [Glossary](https://jutsu.ai/docs/reference/glossary): Key terms used throughout this guide.
  - [Support](https://jutsu.ai/docs/reference/support): For questions and non-urgent issues, email support@jutsu.ai. To help us respond faster, include:
  - [AWS Cloudtrail](https://jutsu.ai/docs/integrations/aws-cloudtrail): Go to app.jutsu.ai and select Integrations in the left navigation.
  - [macOS Host](https://jutsu.ai/docs/integrations/macos-host): Go to app.jutsu.ai and select Integrations in the left navigation. Open the Data Sources category if it is not already selected.
  - [Google Cloud Platform](https://jutsu.ai/docs/integrations/google-cloud-platform): Connect a Google Cloud project to Jutsu with one keyless Cloud Shell command: stream Cloud Audit Logs, enable firewall response actions, and remove it cleanly.
  - [Windows host](https://jutsu.ai/docs/integrations/windows-host): Install the Jutsu agent on a Windows computer or server: register a collector, run the verified install command in an elevated PowerShell, and confirm the host is reporting.
  - [Railway](https://jutsu.ai/docs/integrations/railway): Connect a Railway workspace to Jutsu in about five minutes: create an Account token, paste it with your Workspace ID, and verify audit events are flowing.
  - [Vercel](https://jutsu.ai/docs/integrations/vercel): Connect a Vercel team to Jutsu in about five minutes: create a team-scoped access token, paste it with your Team ID, and verify the connection is healthy.
  - [Cloudflare](https://jutsu.ai/docs/integrations/cloudflare): Connect a Cloudflare account to Jutsu in about ten minutes: create a read-only API token with eleven permissions, paste it with your Account ID, and pick the logs and zones to collect.
  - [Google Workspace](https://jutsu.ai/docs/integrations/google-workspace): Connect a Google Workspace domain to Jutsu with One-click: authorize Jutsu's read-only install in the Admin console, verify with a super administrator's sign-in, and remove it cleanly.
  - [Google Workspace: manage and delete your data](https://jutsu.ai/docs/integrations/google-workspace-data): What Jutsu reads from Google Workspace, how a super administrator removes Jutsu's access in the Google Admin console, and how to delete the connection and its data in Jutsu.
  - [GitHub](https://jutsu.ai/docs/integrations/github): Connect a GitHub organization to Jutsu in about five minutes: install the read-only Jutsu App, pick the repositories to monitor, and disconnect it cleanly.
  - [Linux / Unix host](https://jutsu.ai/docs/integrations/linux-host): Install the Jutsu agent on a Linux server: register a collector, run the install command with sudo, confirm the host is reporting, and remove it cleanly.
  - [Docker containers](https://jutsu.ai/docs/integrations/docker): Ship every container's stdout and stderr to Jutsu: register a collector, start it on the Docker host with one command, keep every log line, and remove it cleanly.
  - [Webhook](https://jutsu.ai/docs/integrations/webhook): Send logs to Jutsu from anything that can make an HTTP request: register a webhook, point rsyslog, syslog-ng, Fluent Bit, Vector or curl at it, and verify the events.