SOCRadar unveils AI-driven platform for automated threat detection

SOCRadar has launched a new platform, SOCRadar Agentic Threat Intelligence, designed to automate threat intelligence by deploying autonomous AI agents that detect, analyse, and respond to external cyber threats.

The platform uses a suite of AI agents that specialise in targeting particular threats such as phishing, brand abuse, credential leaks, and IP exposure. According to the company, these agents are modular, allowing organisations to select and deploy only the ones most relevant to their particular risk landscape. Each agent can also be customised, and workflows automated, to enhance protection with minimal human oversight.

The introduction of SOCRadar Agentic Threat Intelligence comes as organisations increasingly seek operational efficiencies and rapid response capabilities to combat dynamic cyber risks. The platform offers an integrated marketplace where customers can browse, purchase, and manage AI agents via a unified dashboard.

Automated response

SOCRadar describes its solution as a shift from conventional, passive threat intelligence models to proactive, autonomous threat detection and management. Traditional frameworks typically provide security teams with data that must be interpreted and acted upon manually, slowing response times and leaving gaps in protection.

SOCadar's SOCRadar Agentic Threat Intelligence seeks to address this by automating both detection and response. The technology enables real-time decision-making and faster prioritisation of threats, helping organisations maintain a more robust security posture.

"Everyone's talking about AI today - but the real difference will be made by those who actually use it," said Huzeyfe Onal, CEO of SOCRadar. "At SOCRadar, we don't just talk about AI; we're putting it to work. With the launch of our new agentic AI capabilities, including our new Agentic Threat Intelligence platform, we're empowering security teams to act faster, think smarter, and stay ahead of threats in real time. This isn't hype - it's a leap forward in operationalizing intelligence at machine speed."

The company highlights several key features of the platform, including diversity of agents, modular approach, autonomy and flexibility, customisability, and the launch of a cybersecurity AI marketplace.

Key platform features

SOCRadar states the new platform offers:

• Diverse AI agents which target specific threat categories, enabling advanced detection across multiple attack vectors.
• A modular structure so only required agents are deployed, allowing for cost-efficient and targeted protection.
• Autonomy and flexibility that facilitate mix-and-match capability for automating workflows and scaling protection as needed.
• Customisable agents to meet an organisation's distinct risk scenarios.
• An integrated marketplace for browsing and managing agents in one consolidated dashboard.

Coinciding with the platform's launch, SOCRadar is releasing its first agentic workflow, Impersonating Domain Detection, to users of its Extended Threat Intelligence product. This workflow is designed to identify and respond to domains that mimic a company's brand for purposes such as fraud, phishing, or reputational attacks.

Impersonation detection workflow

SOCadar reports several benefits of this new workflow, including a reduced false positive rate by enabling customers to fine-tune parameters and monitor every step in the process. The company also cites increased accuracy from the use of multiple specialised agents, improved detection of sophisticated impersonation attempts, and comprehensive analysis of both textual and visual elements.

The workflow's modular configuration aims to cater to a variety of customer profiles. New agents and customisable steps are built in to keep up with evolving impersonation tactics, and customers have transparency and control throughout the detection process, with the ability to adjust settings according to their risk tolerance and organisational priorities.

Training and industry engagement

SOCRadar reports ongoing activity in the agentic threat intelligence sector, pointing to the recent launch of its MCP Server for threat intelligence and the delivery of AI for Cybersecurity Training to more than 2,000 professionals. The company is also planning to offer AI for Cybersecurity Workshops across 25 countries.

Supported by a global customer base and a suite of XTI products that include cyber threat intelligence, external attack surface management, brand protection, dark web monitoring, and supply chain threat intelligence, SOCRadar positions the Agentic Threat Intelligence platform as part of its broad approach to automated external threat detection and response.