Cybersecurity and Compliance for Startups

Jutsu monitors your cloud, identity, GitHub, endpoints, and more 24/7, investigates threats with AI agents, and automates compliance evidence for SOC 2 and beyond.

  • Connect cloud, identity & code in minutes.
  • AI triages alerts. You approve responses.
  • Security work becomes SOC 2 evidence.

Live with

Google Cloud PlatformGoogle WorkspaceGitHubCloudflareWazuhSlack

What is Jutsu?

Jutsu is a cybersecurity and SOC 2 readiness platform for startups and growing technology companies. It monitors connected cloud, identity, GitHub, and Windows host activity around the clock, uses AI agents to investigate and help respond to threats, and turns that security work into SOC 2 evidence. It is built for founders, CTOs, and first security hires who need real security monitoring and audit evidence without building a security operations team.

Join our Design Partner Program

Work directly with the Jutsu team to shape the future of AI-native Security Operations.

  • Early access
  • Hands-on support
  • Roadmap input
  • Cloud, identity, GitHub, and Windows host monitoring
  • AI-assisted investigation, triage, and reporting
  • Policy-guided response with humans in control
  • SOC 2 evidence from ongoing security work

Cybersecurity built for startup teams

Startup cybersecurity starts with the systems you actually run on. Jutsu connects to each in about 10 minutes or less and brings its security events into one workflow.

  1. Cloud security monitoring

    Detect threats in Google Cloud audit logs: IAM changes, API calls, and resource activity. Also connects Cloudflare, Vercel, and Railway.

    Google Cloud monitoring guide

  2. Identity monitoring

    Watch Google Workspace sign-ins and Admin console changes, with Drive activity and third-party app grants when you turn them on.

    Google Workspace monitoring guide

  3. GitHub and code security

    Receive secret scanning, code scanning, and Dependabot alerts, plus pushes, branch protection changes, and member and team changes.

    GitHub security monitoring guide

  4. Endpoint visibility

    Collect Windows Security and System event logs, add Sysmon events when Sysmon is installed, and run osquery for compliance posture.

    Windows host monitoring guide

ScopeCloud

24/7 security monitoring, from detection to response

Jutsu collects security signals, investigates alerts, coordinates response, and records the evidence your team needs.

  1. Detect

    Collect logs, normalize events, and run detections.

  2. Investigate

    Add asset, identity, cloud, and threat context to alerts.

  3. Triage

    AI agents classify and prioritize alerts for your team.

  4. Respond

    Recommend or run policy-approved actions, all audited.

  5. Report

    Write incident reports and export compliance evidence.

See how the autonomous SOC workflow runs

SOC 2 readiness for startups, backed by security operations

A SOC 2 audit asks for proof that controls like security monitoring and incident response run over time. Jutsu records that work as it happens.

What evidence Jutsu collects

  1. An audit trail of alerts, investigations, and response actions
  2. Incident reports and SOC activity reports
  3. Compliance posture checks for connected Google Cloud, Google Workspace, and Windows hosts
  4. SOC 2 evidence exports, included from the Startup plan

Posture checks and compliance dashboards depend on your plan.

  1. Protect

    Monitor your connected cloud, identity, GitHub, and Windows hosts, and detect threats in their activity.

  2. Prove

    Turn monitoring, investigation, and response records into SOC 2 evidence.

  3. Operate

    Run detection, investigation, and policy-guided response around the clock, with your team approving key actions.

Jutsu supports readiness and evidence collection. Your team and auditor own the audit, and Jutsu does not guarantee its outcome.

AI-assisted security operations, with humans in control

Jutsu's SOC agents help detect, investigate, and respond to security alerts. Monitoring your own AI agents at runtime is a separate, planned capability.

The alert flow

  1. Detection Agent

    Finds suspicious behavior across your environment.

  2. Enrichment Agent

    Adds threat intel, asset, user, and cloud context.

  3. Triage Agent

    Determines severity and confidence of alerts.

  4. Response Agent

    Recommends or runs policy-approved response actions.

AI agent runtime security: on the Jutsu roadmap

On the roadmap — not available today

What is AI agent runtime security?

AI agent runtime security is the practice of monitoring what AI agents do while they run: the tools they call, the APIs and data they reach, and the permissions they act with. It gives a team a way to investigate unexpected agent behavior and keep an audit trail. Jutsu does not offer AI agent runtime security today. It is on the roadmap: the goal is to bring agent activity into the same security operations workflow Jutsu already runs for people, infrastructure, and applications.

See what Jutsu monitors today

Design partners work directly with the Jutsu team and help shape the product roadmap.

Further reading

One security story, from people to AI agents

  • People: monitor sign-ins, admin changes, and app grants through connected Google Workspace audit logs.
  • Infrastructure and applications: monitor connected cloud, GitHub, and Windows host events.
  • AI agents, planned: extend the same Protect → Prove → Operate approach to agents at runtime. Not available today.

Continuous security operations, with your team in control

  • 24/7

    AI-assisted monitoring across connected systems

  • One workflow

    Detection, investigation, triage, response, reporting

  • Human control

    Policy and approval gates for response actions

  • Audit trail

    Investigation and response activity recorded

  • SOC 2 evidence

    Security and compliance evidence exports

Pricing for startups and growing teams

Start free, then add capacity, automation, and governance as your security program grows.

Free

A focused product trial for evaluation.

$0/month
Protected assets
5
Included data
0.05 GB/day
Searchable
7 days
Total retention
30 days
AI investigations50 / month
Operational capabilities
  • Limited AI triage and basic incident view
  • 1 data source and 1 platform user
  • Community support

Startup

Most popular

24/7 AI security for funded startups.

$149/month
Protected assets
25
Included data
0.75 GB/day
Searchable
90 days
Total retention
365 days
AI investigations1,000 / month
Operational capabilities
  • 8 data sources, 30 custom rules, 8 platform users
  • Incident correlation and approval-based response
  • SOC 2 / ISO evidence exports

Growth

Automation and governance for scaling teams.

$499/month
Protected assets
100
Included data
2 GB/day
Searchable
90 days
Total retention
365 days
AI investigations5,000 / month
Operational capabilities
  • 20 data sources, 100 custom rules, 15 platform users
  • Policy-guided response and advanced correlation
  • API/webhooks and compliance dashboards

Enterprise

Let’s talk

Deployment control and SLAs at scale.

Custompricing

Enterprises, MSSPs, and shared SaaS deployments

Operational capabilities
  • Custom AI capacity, retention, and multi-tenant MSSP operations
  • Dedicated onboarding and SLA
  • Private cloud, customer-managed cloud, on-premises, and data-residency options
  • Dedicated and private environments quoted separately

Compare all plans feature by feature

Common questions about Jutsu

View all FAQs

What is Jutsu?

Jutsu is a cybersecurity and SOC 2 readiness platform for startups and growing technology companies. It monitors connected cloud, identity, GitHub, and Windows host activity around the clock, uses AI agents to investigate and help respond to threats, and turns that security work into SOC 2 evidence.

Who is Jutsu built for?

Jutsu is built for startups and growing technology companies, usually a founder, CTO, or first security hire who needs continuous security monitoring and SOC 2 evidence without building an in-house security operations team.

What does Jutsu monitor?

Jutsu monitors the sources you connect. Documented connections cover Google Cloud audit logs, Google Workspace sign-ins and admin changes, GitHub security and repository events, Windows Security and System event logs, and Cloudflare, Vercel, and Railway audit events. It also takes alerts from Wazuh. Drive activity, app grants, and Sysmon depend on setup, and visibility is limited to connected sources.

Does Jutsu provide 24/7 security monitoring?

Yes. Jutsu's AI agents monitor connected systems around the clock, investigate and prioritize security alerts, and support policy-guided response. Your team remains in control of approvals and escalation.

What happens when Jutsu detects a threat?

Jutsu enriches the alert with asset, identity, cloud, and threat-intelligence context, prioritizes the finding, and recommends or runs policy-approved response actions with an audit trail.

Can a startup use Jutsu without a dedicated security team?

Yes. No dedicated SOC team is required to start. Jutsu automates routine monitoring, investigation, triage, and reporting. It does not replace the people who own security decisions: your team stays responsible for policies, approvals, escalations, and business context.

Start with the security your startup needs now

Connect your first source on the Free plan with no credit card, or book a demo to see Jutsu on your own alerts.

Start free

Subscribe to our newsletter

Get the latest security tips, product updates, and news delivered to your inbox.