Figma's security engineering team assembled an alert-response system from commercial parts rather than writing an agent framework: agent loops run inside Tines workflow automation on Claude models…
Triage security alerts
These records have the Security work-domain tag. Compare what starts an investigation, which tools and data the agent can use, and who acts on the result.
Agents
Harvey’s SOC combines independently scheduled reporting, alert-triage and threat-watch agents for its security team.
Scruff investigates security alerts for Notion’s Detection and Response team, preparing analysis for human decisions.
Slack's engineering team runs an agentic service that investigates security alerts. A Director agent orchestrates rounds, Expert agents gather evidence, and a Critic scores each finding for…
Horizon takes requests and external events into remote coding sessions, connects them to company context through MCP, and returns changes for human review. Its orchestrator manages sandbox lifecycle…
Infrastructure
Harvey's internal collaborative cloud agent platform; turns requests from Slack, the web app, or automations into durable runs that return reviewable summaries, diffs, branches, and PRs.
Custom Agents is Notion's platform for building agents in a Notion workspace, and Notion ships it internally first. Staff in IT ticketing, supply chain procurement, and recruiting build their own…
Send a public write-up, talk, or post about a company's internal agent, or tell us what to fix in an entry. Pull requests are welcome.