Penfield

Founded by Hassan Khan & Tahseen Shabab in 2017

Verify and document how security and operations teams follow their processes

Cost

Demo

Rating

★ Mixed Reviews

Time to value

Long Setup (> 1 day)

You can use Penfield to automatically verify that human analysts and AI agents follow standard operating procedures during security and operations work. It captures how senior experts perform tasks, turns those practices into living SOPs, and tracks deviations in real time. Teams can mine knowledge from experienced staff, compare performance across shifts, monitor productivity metrics, and generate reports showing where process gaps occur. It runs locally on standard hardware for data sovereignty.

What Penfield does

Verify analyst work against SOPs and checklists automaticallyMine SOPs from recordings of senior expert workflowsBlock case closure when required investigation steps were skippedGenerate operational reports showing process gaps and performance trendsCompare team performance across shifts and experience levelsSet guardrails that prevent AI agents from acting outside defined proceduresUpdate living SOP documents as tools and best practices changeTrack productivity KPIs and identify coaching opportunities per analystAutomatically checks whether analysts followed each step in an SOP during an investigationRecords how senior experts work and converts their methods into structured, updatable SOPsFlags missing steps or deviations from approved procedures in real timeCompares how different team members handle the same tasks to surface best practicesTracks productivity, SLA performance, and quality metrics per analyst or shiftRuns entirely on local hardware so no data leaves the organizationApplies verification logic grounded in NIST, CISA, MITRE ATT&CK frameworksProvides confidence-scored recommendations at decision points in investigations