Stellar Cyber has released version 7.0 of its security operations platform, introducing new AI-assisted case handling and multi-tenant automation features specifically designed for managed security service providers (MSSPs) operating security operations centers (SOCs). Coverage from Channel Insider indicates that this update aims to address both analyst workload and the administrative overhead that increases with each new client environment.
The new version introduces Case Summary and Auto-Triage capabilities, allowing selected case queues to undergo automated analysis before human review. Auto-Triage investigates alerts, assigning verdicts like true positive or false positive, while Case Summary organizes existing evidence. Case Metrics will track handling times, enabling MSSPs to measure performance against targets and evaluate AI-driven tools. New System Action Center APIs facilitate programmatic actions for cases, infrastructure, users, and licensing, streamlining multi-tenant security management.
Additional features include automated sensor management and parser administration across tenants, along with extended response actions integrating with tools like Microsoft Defender for Endpoint and Fortinet FortiGate. MSSPs are advised to establish defined workflows, set rules for capacity and service tiers, check customer deployment restrictions, and measure delivery economics before fully expanding SOC automation to ensure it aligns with service delivery and economic goals.
Source: Channel Insider
