Login
iscover
ReporterShare this article on:
Powered by
MOMENTUM
MEDIA
Powered by MOMENTUMMEDIA
The new AI-powered capabilities aim to enhance detection and response efficiency in managed environments, reducing alert fatigue and enabling faster, higher-quality investigations.
Cyber security firm Rapid7 has announced the integration of agentic AI workflows into its next-generation SIEM and XDR platform, bringing autonomous investigative capabilities to its managed detection and response services. The update is designed to increase the speed, accuracy, and transparency of threat investigations in security operations centres (SOCs).
Built on Rapid7’s AI Engine, agentic AI performs investigative tasks traditionally handled by human analysts, enabling faster decision making while freeing analysts to focus on complex threats and strategic response efforts.
“As threat actors evolve their methods through AI, organisations need detection and response that can scale accordingly,” Laura Ellis, vice president of AI and data at Rapid7, said in a statement.
“Agentic AI workflows are a key step towards delivering a more scalable, human-centric, and accountable approach to AI in cyber security.”
According to Rapid7, AI automation can close benign alerts with 99.93 per cent accuracy, saving more than 200 SOC hours weekly. The new workflows also provide visibility into the reasoning and logic behind each AI-generated outcome, supporting greater trust and control over service delivery.
“Agentic AI is designed to optimise the human decision moment in the SOC,” said Jon Hencinski, vice president of detection and response at Rapid7. “By automating repetitive tasks and delivering relevant findings with context, analysts are better equipped to respond quickly and confidently to threats.”
Industry analysts welcomed the approach. “Successful AI deployment in cyber security depends on discipline and transparency,” Craig Robinson, research vice president at IDC, said.
“Rapid7’s implementation meets these requirements and delivers measurable operational efficiencies.”
The update is available now as part of Rapid7’s managed detection and response offerings.
Be the first to hear the latest developments in the cyber industry.
