Virgin Money Cuts SOC Alert Backlog by 60% with SOC Automation Solution Legion Security
Just another WordPress site
Press Release Disclaimer: This is a press release distributed through the XPR Media network. It has not been independently verified by our newsroom.
New York City, USA – August 21st, 2026 – Legion Security today published an AI SOC customer case study showing how Virgin Money, a major UK bank, cut its security operations alert backlog by more than 60% in less than two months.
Virgin Money protects more than 6 million customers with a security team of around 200 people. The bank’s digital services create a large attack surface and a high volume of security alerts, many of them low-value or false positives. The result was a backlog of tens of thousands of alerts and the alert fatigue that comes with it.
Virgin Money deployed Legion to automate the repetitive investigation work. Within two months the backlog had dropped by more than 60%.
“Legion has just completely transformed the way I think about automation. You take your existing operation and really just 10x it,” said Neil Robinson, CISO at Virgin Money.
Legion is the agentic security operations platform for the enterprise. It uses vision models combined with other methods to observe how analysts investigate alerts and helps the enterprise either codify those processes or optimize them into visual agentic worfklows that the team can inspect. The bank did not have to define workflows by hand or redesign how its SOC already worked.
Robinson estimates Virgin Money reviews around 100 new security solutions each year, and integrity is a top concern with every one. Legion answered that concern by keeping its automation visible.
“It feels a little bit like magic when you first turn it on, but then it gives you this really nice workflow diagram where you can see exactly what it’s doing,” said Robinson.
The transparency changed how the team saw the technology. Early worry that automation might replace analysts gave way to seeing it as a way to expand what the team can do.
“I don’t see it as something that’s going to replace any of my team. I see it as something that’s going to help us defend the increasing speed of the attack,” said Robinson.
By automating the repeatable investigation work, Legion freed Virgin Money’s analysts to spend more time on the cases that need human judgment.
About Legion Security
Legion Security helps enterprise security teams scale detection, investigation, and response using agentic AI. Recognizing the complexity of enterprise security operations, the platform captures and learns from the real workflows analysts already use today, transforming those actions into trusted, agentic playbooks. This approach allows organizations to gradually adopt frontier AI models while maintaining operational trust, reducing manual effort, and preparing for the next generation of autonomous security capabilities. Legion Security has offices in New York and Tel Aviv and is backed by Coatue, Accel, Picture with investors from Island, Crowdstrike, Wiz and Google Deepminds.
Learn more at legionsecurity.ai.
Media Contact
Company Name: Content Visit
Contact Person: Laura Martisiute
Email: Send Email
Country: Ireland
Website: https://www.contentvisit.com
Press Release Distributed by ABNewswire.com
To view the original version on ABNewswire visit: Virgin Money Cuts SOC Alert Backlog by 60% with SOC Automation Solution Legion Security
