Definition
A security operations center augmented with AI agents that autonomously investigate security alerts, generate playbooks, coordinate incident response, and close alerts without human analyst intervention. Agents reduce alert triage time from hours to seconds.
Why it matters
As attack volume grows and detection capabilities improve, SOCs are flooded with alerts faster than humans can triage; agentic investigation lets organizations operate at machine speed, reducing mean-time-to-respond and freeing analysts for complex cases.