Sumo Logic enhances AI platform for security operations

As reported by Silicon Angle, Sumo Logic Inc. has announced significant advancements to its Doja AI platform, an agentic artificial intelligence system designed for security operations. These new features aim to accelerate investigations and streamline workflows for security teams.

The updates introduce three new components: the SOC Analyst Agent, Knowledge Agent and a Model Context Protocol server. The SOC Analyst Agent, currently in beta, uses AI reasoning to triage and investigate alerts, providing verdicts on severity and context. The Knowledge Agent offers AI-powered answers to user queries in natural language, facilitating faster onboarding and self-service. The MCP server extends Dojo AI by integrating customer-owned AI models and third-party systems, allowing organizations to leverage their own AI within Sumo Logic's secure framework. These enhancements are designed to combat alert fatigue and complexity within security operations centers (SOCs).

These additions highlight the growing trend of integrating AI into cybersecurity to manage the increasing volume of threats and alerts. By providing tools that automate and accelerate investigation processes, Sumo Logic aims to help organizations focus on critical threats. The ability to integrate third-party AI models also suggests a move towards more flexible and customizable security solutions.

Source: Silicon Angle