Joseph Loomis/Patents
Inventor of patented incident response automation — true and provable from the patent itself. Two granted U.S. patents, one published application, all in automated security response, and an industry that built on them.
US 9,773,405·Granted 2017-09-26·Active to 2034
01 Why it mattered
In 2014, when a breach hit, most security teams still coordinated over email and spreadsheets. I filed for a patent on a different idea: the moment an incident is detected, a live response roadmap deploys itself — roles assigned, tasks laid out, every action tracked in one secure place.
That became CyberSponse’s CyOps platform, and the category the industry now calls SOAR. It came from the firehouse: I grew up watching coordinated emergency response, and found that cyber had none — no plans, and no tools that talked to each other.
Other vendors launched in the same window, and I don’t claim to have invented a category alone. What the record shows is narrower and stronger: the patented method, the platform it became, and the later patents from IBM, Bank of America, ServiceNow, Darktrace and others that cite it.
02 The filings
US 9,773,405 B2
When an incident hits, the response plan deploys itself: a lead is designated, the team is notified, tasks are assigned and tracked live.
Google PatentsUS 12,375,502 B2
One security orchestration hub safely serves many customers, sharing only the alert data each customer allows and running workflows remotely. Published earlier as US 2020/0259847.
Google PatentsUS 2016/0149948 A1
One tool spots a threat, a second automatically confirms it, and the analyst gets one answer. Co-inventor Christopher Coriale.
Google Patents03 The lineage
The team I built kept inventing on top of it at Fortinet. These are the team’s patents after the acquisition — they don’t name Joe as inventor, except the bridge patent, filed while still CyberSponse.
| Patent | Title (short) | Inventors from the CyberSponse team |
|---|---|---|
| US 12,375,502 B2 | Secure data replication, master and tenant nodes | Joseph Loomis, Abhishek Narula, Pooja Singh, Amit Jain and others — the bridge patent |
| US 11,757,718 B2 | Secure data replication in a hierarchical multitenant SOAR | Narula, Singh, Mishra, Agarwal |
| US 11,882,135 B2 | Machine learning that generates incident-specific SOAR playbooks | Narula, Jain, Singh, Carsey |
| US 11,894,981 B1 | Generating SOAR playbooks | Bharathram, Narula, Singh |
| US 11,855,854 B2 | Measuring an automation platform | Konthalapally, Narula, Singh |
| US 2021/0297427 A1 | ML mind-map threat investigation in SOAR | Narula, Jain, Singh, Carsey |
04 Other inventions
The CyberSponse platform; now Fortinet FortiSOAR — 325+ connectors, 200+ prebuilt playbooks at acquisition, per Fortinet.
Net Enforcers’ engine for finding counterfeit and unauthorized sellers at internet scale.
VA-integrated automation for filing and tracking benefits claims. No TurboVets patent filings are public yet.
> sources ........ Google Patents, Justia > inventor ....... "Joseph Loomis" · "Joe Loomis" · "Joseph C. Loomis" > assignee ....... CyberSponse · Net Enforcers · TurboVets · Fortinet · Intersections ✓ result ......... 3 filings (above) · nothing under Net Enforcers or TurboVets > note ........... two 1970s–80s patents by a Joseph L. Loomis are a different person