KDDI Adds Exaforce Agentic SOC Platform to Security Services

KDDI just added Exaforce to its managed security offer

KDDI America and KDDI Europe announced on September 23, 2026 that they are adding Exaforce’s agentic SOC platform to their managed security services across the US, Europe, the Middle East, and Africa. It is a 24/7 AI-powered security operations center built for threat detection, triage, investigation, and response.

That sounds big. For a 30-person company, it mostly means one thing. Someone bigger than you is trying to package enterprise security work into a service you can buy instead of hiring a whole security team.

What the platform actually does

Exaforce is not being sold here as another dashboard that shows more alerts. KDDI says the service covers endpoints, networks, SaaS, and identity access management from a single platform. That matters because most small and mid-sized businesses do not get breached in only one place. The mess usually starts with a laptop, a password, a cloud app, or an identity account that should have been locked down.

The pitch is that the platform helps with detection, sorting through alerts, investigation, and response. That is the useful part. If it works the way it is advertised, it can reduce the amount of human time spent staring at noisy security alerts and deciding which ones deserve attention.

We like the direction. We do not love the marketing language around it, because every vendor says AI will transform security. Most of the time, the real win is more ordinary. It is fewer missed alerts, faster triage, and a cleaner handoff when something is actually wrong.

Why this matters for smaller businesses

The announcement is aimed at multinational enterprises operating across the US and EMEA. That is the main customer. It does not clearly say this service is available directly to SMBs, and it does not give pricing, contract terms, or a launch timeline. So if you run a local business in San Diego County, this is not a product you should rush out and buy tomorrow.

Still, the direction is worth paying attention to. Smaller firms are stuck in a bad spot. We need better security than the old break-fix model, but we rarely have the budget for a full internal SOC. Services like this are the industry trying to fill that gap with AI-assisted monitoring and response.

That is helpful if your business has enough endpoints, cloud apps, and user accounts to create real risk. If you have one office, a few dozen users, and no one watching security after hours, this kind of service can be more realistic than hiring a dedicated analyst. If your environment is tiny and simple, it may be more tool than you need.

What we would actually do with this news

We would not chase the headline. We would ask a simpler question. Do we already have good endpoint protection, identity controls, logging, and backup recovery, or are we missing the basics?

If the basics are weak, a fancy AI SOC will not save you. It will just watch a messy environment. That is expensive monitoring on top of avoidable problems.

If the basics are in place, then a managed service built around AI-assisted detection and response can make sense, especially if your team does not have anyone who can investigate alerts after hours. The right test is not whether the service sounds advanced. The right test is whether it shortens time to detect and time to respond without adding more work for your staff.

• Check whether your endpoints are fully managed and patched.
• Confirm identity protections like MFA and account lockout are enforced.
• Review whether security logs are actually being kept and reviewed.
• Ask your current provider how alerts are triaged after hours.

The plain answer for a 30-person company

This announcement does not change everything for a small business. It does show that enterprise-grade security monitoring is moving farther into managed services, and that is useful. The hype is the AI label. The practical value is having someone catch a breach faster than your staff can notice it on their own.

If your company is already stretched thin on IT and security, we would treat this as a sign to review your current monitoring and response plan now. IT911Now can help you sort out whether you need better basics, better monitoring, or both, and that is the next conversation worth having.