Blog
Field notes on the AI SOC.
How we think about alert triage, investigation, and handing off security operations — from the team building it.
Featured · Product
Fast or fully managed? How to choose your AI SOC.
Two ways to run the AI SOC by AirMDR — one you drive yourself, one we drive for you. Here's how to tell which fits your team right now.
Perspective
Agentic triage has crossed a tipping point.
Automation, SOAR, ML, copilots — each was going to fix the SOC, and each helped. But triage stayed broken. What changed is where the intelligence lives: inside the investigation.
Perspective
The security ladder: how security actually evolves.
A field map of eight stages across seven domains. Every rung is triggered by an event — a questionnaire, an enterprise deal, an incident, a regulator — not by headcount.