Artemis for Security: threat detection, triage, and automated response
Artemis for Security is Alethea's agentic AI platform for global security operations centers (GSOCs), insider threat teams, and enterprise risk functions. It connects narrative intelligence with physical-threat assessment and automated takedown workflows. Launched September 15, 2026, it is available now. Launch announcement
Detection and triage
Artemis groups signals from mainstream and fringe sources into threat narratives. Its radicalization model scores severity from S1 (monitoring-level) to S5 (imminent threat), tracking progression toward credible threats. Artemis flags registered executives, family members, board members, and employees when they appear in a narrative. Analysts create searches in natural language; Artemis converts them to Boolean logic. Alert frequency, model weighting, and collection cadence are configurable. Detection capabilities
Signals include violent rhetoric, coded language, memes, doxxing, and coordinated account activity. Cases move through open, triage, active, and closed states. Separate workspaces support physical security, insider threat, executive protection, and communications under one contract. Product details
Takedowns and response
For violative content, teams can choose autonomous takedown workflows or human review before action. Artemis preserves evidence in tamper-proof, hash-verified records. Response packages combine security briefs, takedown workflows, and communications holding statements. Response capabilities
Takedown requests cover threats of violence and violative deepfakes or AI-generated content, with progress tracking. Security assessments and holding statements can be shared through webhooks, email, or export. Role-based access controls govern viewing, modification, and action; activity logs are immutable and exportable. Launch details
Crisis Mode
Director-level activation changes reporting criteria, assigns responsibilities, and opens a secure channel for sensitive incidents, including insider threat investigations. Data caps lift and models accelerate. Crisis Mode
Integrations and related releases
Slack, Microsoft Teams, and PagerDuty have native integrations. Webhook APIs connect to SIEM and threat intelligence platforms. Integration overview
Alethea's REST API delivers Artemis intelligence to client systems through HMAC-secured webhooks. Its MCP server supports plain-language intelligence queries and cited briefings. Narrative velocity alerting detects accelerating narratives. Related releases
Artemis for Communicators remains a planned release, scheduled before the end of 2026 in the September 15 announcement. Product roadmap