BlueVoyant launches agentic SecOps platform built on Microsoft stack

BlueVoyant has launched BlueVoyant AI, an agentic security operations platform that automates the detection, triage and containment of cyber threats, offered both as a fully managed service and as software for in-house security teams.

The platform is pitched at the alert-volume problem facing security operations centres.

BlueVoyant said every alert entering the platform is automatically enriched, analysed and triaged, with automated response actions and agents able to contain threats by isolating compromised devices, revoking credentials or removing malicious emails across an environment - actions the company said run at machine speed within workflows that keep humans in the decision loop.

Customers can take it as an AI-powered managed SOC, with BlueVoyant’s own team running detection and response around the clock, or as a self-service platform giving internal teams the same detection, triage and response agents.

It is sold through BlueVoyant’s account specialists and selected value-added resellers, and the company said organisations can connect Microsoft 365, Defender and other tools in minutes.

BlueVoyant positioned its Microsoft specialisation as the platform’s main differentiator, saying its models and playbooks draw on nearly a decade of operations across the Microsoft Security ecosystem and more than 2,500 customer deployments in Microsoft-native environments.

“For years, the security industry has promised AI-powered defence but failed to deliver what security teams actually need,” said John Hernandez, chief executive of BlueVoyant.

"BlueVoyant AI is different. It is the product of almost 10 years of hands-on experience defending the world's most complex environments, distilled into a platform that thinks, decides, and acts at machine speed. We're not augmenting the SOC. We are helping it evolve."

Sebastian Sobolev, chief product officer, said the platform delivered decision-ready alerts in real time and sharply reduced response times — claiming it effectively eliminates false positives, a step change he predicted would become an industry standard.

The company also flagged a roadmap centred on identity security, noting that non-human identities now outnumber human ones in most enterprises and remain among the least protected. It said its experience with Microsoft Entra would let it discover, monitor and secure those identities.