Security operations centers have struggled with alerts for years, and AI agents offer a new way to tackle it: let machines investigate some of those alerts themselves.

That’s already starting to happen. Security teams are experimenting with AI that can pull together signals from different systems, investigate suspicious activity, and recommend next steps to humans in the loop. But moving from AI-assisted security to increasingly autonomous security creates a new problem: how much control are organizations actually prepared to hand over?

On October 8, The New Stack is hosting Running an AI-Powered SOC: How to Match AI-Speed Attacks Without Losing Control, a live session that tackles this question head-on with a candid conversation and a live platform demonstration.

How do you give AI agents more autonomy in your SOC without losing the control and oversight your security operations require? *

There’s an obvious appeal to AI agents in the SOC: analysts have finite time and attention, while the volume of potential threats does not come with the same constraint. Attackers are also getting access to AI tools that can accelerate parts of their own operations. Simply giving analysts better ways to work through an ever-growing queue may only get security teams so far.

There is a big difference between asking an AI agent to investigate a suspicious login and allowing it to disable the account responsible for it. The same goes for isolating an endpoint, blocking network traffic, or making other changes that could immediately impact the business.

Source link