Exabeam has announced a set of updates to its security operations platform, aiming to bring AI-assisted investigation and governance to both cloud and on-premises environments. The company frames this as the "Agentic SOC," where AI agents work alongside human analysts to handle investigation, context gathering, and repetitive tasks.
Nova AI now acts as a persistent investigator across the platform, gathering context and running secondary searches as incidents unfold. Exabeam says its own security operations team measured Nova AI triaging an average case in about 10 minutes, compared with roughly five hours for a human analyst. The company also introduced a plugin for Anthropic's Claude Code and OpenAI's Codex, letting analysts use natural-language commands to triage alerts and investigate cases.
For organizations that must keep data on-premises, the modernized LogRhythm SIEM platform now includes generative AI collectors for ChatGPT, Google Gemini, and GitHub Copilot, as well as a community Model Context Protocol (MCP) server that lets teams query security data using local AI models without moving data outside their environment. The platform has migrated from Elasticsearch to OpenSearch and adds self-service reporting with AI governance and audit-ready compliance reporting.
The announcement is based on a single vendor press release; no independent evaluation of the claimed performance or capabilities is included. IDC analyst Michelle Abraham is quoted saying the evolution toward an agentic SOC is about changing where analysts' time and judgment are applied, but that view is presented as part of the vendor's announcement.