Securonix Bolsters SIEM with AI Agent Monitoring and Cost Controls
Securonix enhances its Unified Defense SIEM platform with new AI agent detection capabilities and expanded threat analytics for Microsoft Sentinel, aiming to reduce data costs and improve threat visibility.
Securonix has announced significant updates to its Unified Defense SIEM platform, introducing Governed AI Agent Detection and Response capabilities alongside expanded Threat Analytics for Microsoft Sentinel. These enhancements are designed to help organizations better manage escalating SIEM data costs, improve the accuracy and speed of threat detection and response, and gain crucial oversight over risks introduced by the widespread adoption of enterprise AI.
The cybersecurity landscape presents a trifecta of challenges for security teams: continuously rising telemetry volumes and associated SIEM costs, an increasingly complex threat environment spanning multiple domains like identity, cloud, and endpoints, and the rapid deployment of AI assistants and autonomous workflows that can access sensitive systems. Securonix aims to address these pressures by providing better control over data economics, enhancing detection across existing platforms, and offering clear oversight of automated activities.
One key innovation is the expansion of Threat Analytics for Microsoft Sentinel. This feature acts as a lightweight, cloud-native analytics and intelligence layer that enriches telemetry already present in Sentinel. By applying behavior-driven analytics, UEBA, advanced correlation, and dynamic risk scoring, Securonix analyzes data and returns higher-confidence detections directly to Sentinel. This allows analysts to continue working within their familiar Sentinel workflows, gaining broader coverage and richer behavioral context without the need for additional agents, duplicated pipelines, or re-platforming their Security Operations Center (SOC).
For managed security service providers (MSSPs) and managed detection and response (MDR) providers, the enhanced Threat Analytics for Microsoft Sentinel offers a path to differentiate their services. It enables them to deliver enhanced monitoring with out-of-the-box behavior-based detections and threat modeling across multi-tenant environments, streamlining content management and onboarding without disrupting customer environments or introducing disconnected analyst workflows.
Furthermore, Securonix is introducing Governed AI Agent Detection and Response. As AI agents become more integrated into enterprise operations, interacting with users, applications, and sensitive data, security teams require visibility into their activities. This new capability applies behavioral analytics to both human and non-human identities to detect abnormal agent behavior, suspicious human-to-agent interactions, risky tool invocations, unusual prompt activity, and potential misuse or compromise. This is crucial for monitoring activity across various enterprise AI environments, including Microsoft Copilot and other AI assistants.
The platform ensures that findings preserve behavioral context, investigations remain explainable, and response actions are auditable, maintaining human oversight of critical decisions. This addresses the growing need to understand what AI agents are doing, which resources they are accessing, and whether their behavior deviates from policy or indicates a security risk.
To combat rising data costs, Securonix has also expanded its Data Pipeline Manager (DPM) licensing and is now shipping the DPM agent. These capabilities provide enterprises and service providers with greater control over how telemetry is collected, routed, retained, and analyzed. This allows organizations to align data handling strategies with their operational and security value, ensuring high-priority data supports real-time analytics and detection while managing overall costs effectively.
These updates position Securonix to help organizations navigate the complexities of modern cybersecurity, particularly as AI integration accelerates. By focusing on cost control, enhanced detection through AI, and governance of AI agent activity, the company aims to provide a more robust and manageable security posture for its customers.