Blumira has launched SOC Auto-Focus, an AI-powered investigation tool built to help security and IT teams respond to threats with greater speed and clarity. The company is also rolling out major enhancements to its
MSP Partner Program, aimed at giving managed service providers the flexibility and tools to grow their security practices without adding headcount.
AI That Supports, Not Replaces, Analysts
While much of the industry pitches automation as a replacement for human analysts, Blumira is taking a different approach.
Matt Warner, Co-founder and CEO, Blumira, told MSSP Alert, “When we began developing SOC Auto-Focus, we asked ourselves what the primary security considerations are when using AI in a security operations workflow. In our review of available research on how using AI tools affects critical thinking, we found that oftentimes the error made by the human is accepting the overpromises made of its capabilities.”
Warner explained that Auto-Focus was intentionally designed to enhance context rather than decision-making. “We made clear at every level – including the name – that its function is enriching context so that responders can make better decisions, faster. Auto-Focus differentiates itself by augmenting human judgment, not replacing it, which AI is perfectly suited to do.”
By drawing on Blumira’s existing library of detection rules, best-practice workflows, and attack pattern data, Auto-Focus delivers insight into what’s happening, why it matters, and what similar activity typically represents. “This way, even team members, regardless of their security background, can make better decisions while still learning those patterns themselves,” Warner added.
Building Trust in AI for the SOC
As many teams experience “AI fatigue” from tools that overpromise and underdeliver, Blumira is leaning into transparency and control.
“A perfect tool that teams are reluctant to use isn’t a very useful tool at all,” Warner said. “The approach we landed on aligns with where security professionals want to use AI - as an assistive function that augments and extends their own abilities without giving up control or losing visibility.”
He emphasized that Auto-Focus also serves an educational purpose. “We provide a detailed workflow alongside each finding, acting as guidance for less-experienced admins and analysts who don’t have a documented playbook for response. Each finding they respond to is another opportunity to build that security muscle.”
Warner pointed to workforce data underscoring the importance of this approach. “The latest ISC2 workforce study makes clear that budgets and headcount are limited, which often means organizations hire fewer, more senior analysts who must juggle both complex and routine tasks. That shift makes for less resilient teams. We need the next generation of security professionals to have opportunities for that on-the-job training necessary to build that knowledge. Our goal is that by building expertise into the Blumira platform, through tools like Auto-Focus, newcomers to security work can be more effective.”
MSP Program Built for Flexibility and Growth
Alongside the new AI capabilities,
Blumira’s updated MSP Partner Program reflects a broader focus on flexibility and scalability for service providers.
“We’re redesigning our MSP program around flexibility,” Warner said. “We recognize that MSPs operate differently, so our new tiered editions align with how they actually work. We’re eliminating annual commits to accommodate these diverse business models.”
Warner added that the company has also expanded its partner enablement resources. “We’ve drastically scaled up our onboarding process for new partners, adding more training and support through our new Partner Portal. This includes detailed guidance on how to use the MSP Portal for a fast overview of all their client accounts, and tailoring the configuration of those accounts to meet their clients’ individual needs.”
Blumira has refined its MSP offerings with the addition of a Respond Core package, providing core detection and response features with shorter retention periods for clients who don’t need a full-year term.
Channel Strategy and Compliance Enablement
As MSSPs and MSPs face mounting customer security demands, Blumira’s enhanced partner model is designed to help them scale efficiently.
“MSSPs and MSPs are in a challenging position right now,” Warner said. “They have clients with increasing security requirements due to compliance mandates or the growing risks driven by offensive use of AI tools. Our partners want to meet those needs and stay competitive, but most can’t afford to hire a new team of security experts. With Blumira, they can meet client needs with the team they already have, and grow that team’s expertise over time.”
He added that the new partner tiers are built to evolve with a provider’s security maturity. “We intentionally created partner tiers that scale with their security business, as well as continuing security education to further build that in-house expertise.”
Blumira is also expanding support for MSPs pursuing CMMC Level 1 and Level 2 compliance, including a comprehensive CMMC support program and shared responsibility matrices to help partners streamline certification.
