Data Security, SOC, AI/ML, Threat Hunting, Security Operations

Proofpoint launches AI agent to help SOC teams investigate threats

Proofpoint has introduced its SOC Analyst Agent, an AI-powered tool designed to assist security operations center (SOC) teams in investigating threats and automating analysis, following insights from Channel Insider.

The new agent, currently in private preview and slated for general availability by the end of Q3 2026, utilizes OpenAI Daybreak models to connect security signals across Proofpoint products. This aims to address the "prioritization challenge" faced by SOC teams, where 54% of organizations already employ AI for alert triage but still struggle to correlate information from disparate systems.

The SOC Analyst Agent allows analysts to use natural language for investigations, drawing context from alerts, logs, DLP events, and user risk signals. Key capabilities include accelerating investigations by reducing manual data assembly, automating recurring analysis for threat hunts and reporting, and ensuring analysts remain in control by making findings traceable to source data.

Proofpoint's expanded use of OpenAI's cyber-focused models, following its June 2026 membership in the OpenAI Daybreak Defense Network, aims to provide defenders with advanced AI capabilities without compromising human oversight.

Source: Channel Insider

An In-Depth Guide to AI

Get essential knowledge and practical strategies to use AI to better your security program.

You can skip this ad in 5 seconds