e2e-assure launches Cumulo, the UK's first sovereign AI SOC platform for IT and OT

UK company e2e-assure has unveiled an updated version of its Cumulo platform, the first sovereign AI-based SOC service in the UK. The product protects both corporate IT infrastructure and industrial OT systems from zero-day threats, and is a direct response to GCHQ's initiative to build a national AI Cyber Shield.

How the platform works

Cumulo runs on the SOC-as-a-service model: an organization gets a full security monitoring center without having to hire its own team of analysts or build infrastructure from scratch. The main difference from traditional managed SOCs is that all detection logic relies on artificial intelligence models rather than rules and signatures.

The architecture has two components. The first is digital twins: the platform creates a virtual model of each client's infrastructure and continuously compares the network's real behavior with the twin's reference state. Any persistent deviation is treated as a signal of a potential threat and is analyzed before it becomes a full-blown incident. This approach moves defense from reactive to proactive: an attack is caught at the reconnaissance or initial intrusion stage.

The second component is dedicated AI models for each customer. Traditional SIEM systems apply the same detection rules to all clients. Cumulo trains a separate model on the data of the specific organization, which reduces false positives and makes it possible to spot anomalies specific to that environment more precisely.

Sovereignty and the GCHQ initiative

e2e-assure's core position is that client data is processed exclusively within UK jurisdiction and is not passed to third-party clouds, including the infrastructure of US providers. This is what the company calls the platform's "sovereignty".

GCHQ has announced the AI Cyber Shield program, a government initiative to strengthen the cybersecurity of critical infrastructure using AI. The program requires sovereign data processing for systems operating at sensitive sites. Cumulo is explicitly positioned as a solution that meets this requirement.

According to e2e-assure, the platform provides:

• Detection of zero-day threats before they materialize as an incident
• Unified monitoring of IT networks and OT systems (SCADA, industrial ICS controllers)
• UK jurisdiction: data does not leave the controlled environment
• Personal AI models for each customer
• An as-a-service format, with no need to build your own SOC

Why IT and OT need to be protected together

Industrial control systems (OT) were historically built as isolated networks, with no connection to the internet or corporate resources. Over time, however, enterprises began integrating factories and power systems with corporate networks for remote management, monitoring and analytics. The boundary between IT and OT is blurring.

This has created a persistent class of threats. Attackers get in through the IT perimeter, via phishing, a vulnerable VPN or a compromised contractor, and then move into the OT segment. That is where the most damage is done: production stoppages, accidents at energy facilities, disruption of life-support infrastructure. Attacks on industrial facilities in Europe and North America in recent years have established a consistent pattern: the entry point is always IT.

Separate SOC solutions for IT and OT create blind spots at the points where the segments meet. Cumulo sees both layers in a single security context: the AI tracks the whole attack chain from the very beginning, while it is still in the corporate network, before the threat reaches critical industrial assets.

What this means

The launch of Cumulo is part of a broader trend: European governments and regulators increasingly demand sovereign AI solutions in cybersecurity. For the SOC-as-a-service market, this means competition shifting from price and response speed to data jurisdiction guarantees, depth of integration with infrastructure, and the ability to monitor IT and OT simultaneously in a single threat context.