Company facts
Independent, profitable, and still building
D3 Security has worked in cybersecurity since 2012. The company is employee-owned, profitable, and not dependent on venture funding, and it puts about half of its revenue back into research and development. Morpheus, its agentic SOC platform, was built from scratch.
Built from scratch by
Why this matters when you choose an AI SOC vendor
KuppingerCole Analysts counted 123 AI SOC vendors in August 2026 and expects about twenty to remain as independent, comprehensive vendors by 2030. A security operations platform sits in the middle of your stack for years. Whether the vendor can keep supporting and developing it is part of what you are buying.
The facts
| Fact | Detail |
|---|---|
| In cybersecurity since 2012 | D3 launched its cyber incident response product in 2012, its SOAR in 2014 and Morpheus in 2024. Morpheus Threat Hunting follows in 2026. |
| Customers stay | D3 customers stay five years on average, and some have been customers since 2012. |
| Employee-owned | No outside investor sets the roadmap or a timeline for a sale. |
| Not dependent on outside funding | Development is paid for from customer revenue, not from funding rounds. |
| Profitable | D3 operates at a profit. Financial statements are available to customers and prospects under NDA. |
| About half of revenue goes to R&D | All development is done in house. |
| Morpheus was built from scratch | It is a new platform, built over 24 months by a team of 60 specialists, and generally available since August 2025. It has its own deterministic playbook engine, case management and integration framework. It is not an AI layer added to D3’s earlier SOAR product. |
| Still shipping | Five release waves since general availability, listed with dates in the release history. Morpheus Threat Hunting is planned for the end of November 2026. |
What this means for a customer
- The roadmap answers to customers, because customers fund it.
- Product investment does not stop when venture funding tightens.
- Your contract is with a company that plans to be here at renewal, and at the renewal after that.
- The team that builds Morpheus is the team that supports it.
Questions to ask any AI SOC vendor
Put these four questions to every vendor on your shortlist, including us.
Is the company profitable, and if not, how many months of runway does it have?
D3: profitable.
What happens to my contract, pricing and roadmap if the company is acquired?
D3: employee-owned, and not on a venture timeline that requires a sale.
What share of revenue goes to product development?
D3: about half.
How long have your largest customers stayed, and can I speak to them?
D3: five years on average, and some have been customers since 2012. References on request.
Frequently asked questions
Is D3 Security venture-funded?
D3 Security does not depend on venture funding. The company is employee-owned and pays for development from customer revenue.
Is D3 Security profitable?
Yes. D3 Security is profitable and reinvests about half of its revenue in research and development.
Who owns D3 Security?
D3 Security is employee-owned.
How long has D3 Security been in business?
D3 Security has worked in cybersecurity since 2012, and its customers stay five years on average. It launched its cyber incident response product in 2012, its SOAR in 2014 and Morpheus in 2024. Morpheus Threat Hunting follows in 2026.
Was Morpheus built on D3’s earlier SOAR product?
No. Morpheus is a new platform, built from scratch over 24 months by a team of 60 specialists, and generally available since August 2025. It includes its own deterministic playbook engine, so SOAR playbooks migrate to it, but it is not an AI layer added to an older product.
Is D3 Security a SOAR vendor or an AI SOC vendor?
D3 launched its SOAR in 2014 and now builds Morpheus, an agentic SOC platform. Morpheus investigates every alert autonomously and includes a full playbook engine and case management, so one platform covers what a SOAR does and what an AI SOC analyst does.
What happens to D3 Security if the AI SOC market consolidates?
D3 does not need a funding round or an acquisition to keep operating. It is profitable, employee-owned, and funds development from customer revenue.