Autonomous AI systems are starting to handle cybersecurity alerts end-to-end: detecting threats, running playbooks, patching issues, and closing tickets without human help. These workflows are still experimental and showing mixed results, though AI has been in SIEM tools for years.
Chapters
Todd, you and I were chatting yesterday, maybe just as a cyber-specific example about one of the first areas, I mean, AI, agentic AI is being tried and used successfully and not quite as successfully in various places as cybersecurity operations and dealing with the minutia of alerts and patching. Obviously it's been ripe for opportunity for a while. Even some of the SIEM providers have been using AI within their solution for years. So this isn't anything new, but just to bring up our conversation from yesterday, you had a really good point on like, Brahman, to your question, autonomous, autonomous would be see an alert, follow a playbook, patch or resolve the issue, notify somebody, close the ticket. It's fully autonomous.