❌

Normal view

Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots

13 July 2026 at 11:37
A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing real value in specific investigations. But as we mapped out the broader architecture, something kept nagging at me. The design they were building

❌