Slack's engineering team runs an agentic service that investigates security alerts. A Director agent orchestrates rounds, Expert agents gather evidence, and a Critic scores each finding for…
Triage security alerts
These records have the Security work-domain tag. Compare what starts an investigation, which tools and data the agent can use, and who acts on the result.
Agents
Horizon takes requests and external events into remote coding sessions, connects them to company context through MCP, and returns changes for human review. Its orchestrator manages sandbox lifecycle…
Figma's security engineering team assembled an alert-response system from commercial parts rather than writing an agent framework: agent loops run inside Tines workflow automation on Claude models…
Harvey’s SOC combines independently scheduled reporting, alert-triage and threat-watch agents for its security team.
Scruff investigates security alerts for Notion’s Detection and Response team, preparing analysis for human decisions.
Infrastructure
Harvey's internal collaborative cloud agent platform; turns requests from Slack, the web app, or automations into durable runs that return reviewable summaries, diffs, branches, and PRs.
Custom Agents is Notion's platform for building agents in a Notion workspace, and Notion ships it internally first. Staff in IT ticketing, supply chain procurement, and recruiting build their own…
Share a resource or public mention, suggest an addition, or correct an existing entry. Pull requests are also welcome.