Blackpoint Cyber Unveils Autonomous AI Agent for Identity Threat Containment
Blackpoint Cyber's new AI SOC Agent autonomously detects and contains credential-based attacks targeting Microsoft 365 and Google Workspace in under two minutes.
Blackpoint Cyber has announced the general availability of its Blackpoint AI SOC Agent, a new tool designed for identity threat detection and response (ITDR). This AI-powered agent operates autonomously, leveraging a hybrid model that combines artificial intelligence with human oversight to identify and neutralize high-confidence threats. The primary focus of the agent is to protect Microsoft 365 and Google Workspace accounts from credential-based attacks, a rapidly growing threat vector.
Identity-based attacks have seen a significant surge, with Microsoft reporting a 32% increase in such incidents during the first half of 2025. This trend highlights the increasing importance for security teams to implement robust measures to detect and halt credential compromise before it escalates into full-blown data breaches. Blackpoint's AI SOC Agent aims to address this critical need by providing rapid, automated containment.
The development of the AI SOC Agent involved extensive training, drawing upon years of decisions made by Blackpoint's Security Operations Center (SOC) analysts. This training data was augmented by forensic evidence from hundreds of industry breaches and telemetry gathered from nearly a million customer accounts. Rigorous validation processes were employed before its deployment and continue to ensure that only threats meeting a high confidence threshold trigger autonomous containment.
This approach ensures that the AI acts with a level of trust derived from real-world security expertise. By bringing Blackpoint's frontline security experience directly to customers, the AI SOC Agent promises machine-speed threat containment, reducing response times to mere seconds. This capability is crucial in an environment where attackers are increasingly leveraging sophisticated tools and techniques.
Sean Furman, President of STF Consulting, emphasized the value of Blackpoint's integrated approach. "Every minute matters when protecting our clients from today's cyber threats," Furman stated. "The combination of Blackpoint’s AI and security analysts gives us confidence that we’re staying ahead of the growing volume of attacks." This sentiment underscores the industry's need for solutions that can keep pace with evolving threats.
Gagan Singh, CEO of Blackpoint Cyber, further elaborated on the philosophy behind the AI SOC Agent. "When vendors or the market talk about AI replacing the SOC, our answer is that our SOC is a big reason that AI works in cybersecurity," Singh explained. He noted that adversaries are already operating at an "agentic" level, and future threats will likely emerge without human direction at an unprecedented scale.
Singh highlighted that the AI empowering defenders is also being used by attackers to create novel threat vectors. The Blackpoint Agent was specifically designed with input from their SOC, which comprises former NSA, DIA, and CIA operators. Their judgment set the boundaries for the AI's actions, ensuring that while the AI acts faster, human judgment remains central to securing the outcome.
The Blackpoint AI SOC Agent represents a significant step forward in automated cybersecurity defense, particularly for identity-based threats. By combining advanced AI with deep human expertise, the company aims to provide customers with rapid, reliable containment against the most pressing credential-based attacks targeting cloud environments.