Rapid7 launches agentic AI for managed detection and response

Security vendor Rapid7 has unveiled agentic artificial intelligence workflows embedded within its next-generation security information and event management and extended detection and response (SIEM and xDR) platform for improved threat investigation.

The new capabilities use Rapid7's Artificial Intelligence Engine to enable autonomous performance of foundational investigative tasks.

Rapid7 said this can be done with the expertise of a security operations centre (SOC) analyst at artificial intelligence speeds.

The security vendor's agentic AI workflows incorporate the company's artificial intelligence automation for alert triage, which closes benign alerts with a claimed 99.93 per cent accuracy and saves more than 200 SOC hours per week.

"Artificial intelligence isn't just an enhancement to security operations, it's a catalyst for a new era of scale, speed, and strategic decision-making," Laura Ellis, vice president of artificial intelligence and data at Rapid7, said.

"At Rapid7, we believe artificial intelligence must be human-centric, transparent and accountable, and built on analyst expertise."

The workflows are trained on playbooks designed by Rapid7's own SOC experts and refined through continuous real-world application.

The system delivers improved confidence in security postures through scalable, repeatable, high-quality investigations that protect against sophisticated artificial intelligence attackers amid increasing alert volume, Rapid7 said.

The platform enables return on detection and response investments through reallocation of analyst hours to the most complex tasks and strategic decisions.

"A world-class SOC optimises for the 'human' decision moment," Jon Hencinski, vice president detection and response at Rapid7, said.

"With agentic artificial intelligence workflows, we're using artificial intelligence to present the right information to enable accurate and fast human decisions that allow organisations to quickly find and stop today's artificial intelligence-enabled attackers."

The workflows automate repetitive tasks, surface relevant findings, and provide contextual information to support analyst decision-making.