AI agents to transform Google Cloud security ops

Google Cloud is advancing its cybersecurity capabilities by integrating agentic AI into security operations, enabling intelligent agents to independently perform tasks like alert triage and malware analysis while maintaining collaboration with human analysts, reports Security Brief Australia.

These AI agents, part of the Gemini in Security suite, aim to reduce the burden of repetitive tasks and accelerate processes such as writing regular expressions, which now take seconds instead of hours, according to Apex Fintech’s Hector Peña. Launching in preview in Q2 2025, new agents will deliver detailed verdicts and audit logs, enhancing Tier 1 and Tier 2 analyst workflows. Google Threat Intelligence’s malware analysis agent will autonomously reverse engineer suspicious files and provide safety assessments. The agentic SOC model links specialized agents to automate key security functions, including threat hunting and exposure management. Supporting this is Google’s Agent2Agent and Model Context Protocol, fostering interoperability. Through SecOps Labs, Google invites customer feedback to refine AI pilots and shape the future of intelligent security operations.