Press release · October 27, 2026 · globenewswire.com
Arctic Wolf says agentic AI resolves 60% of investigations
- About Arctic Wolf
- Also names services
- specialized
- Threat Landscape
- Read the original
Summary
Arctic Wolf, a cybersecurity and AI company, released its 2026 Agentic Security Operations Report, which finds that agentic AI now resolves 60% of security investigations. The findings describe a shift in how security operations divide work between AI and human analysts.
Threat actors increasingly use AI and automation to move faster and expand their operations. The report describes a growing need for machine-speed security operations, since teams facing critical vulnerabilities such as PHP2Shell may have hours, not days, to assess exposure, set remediation priorities, and examine signs of compromise.
The Aurora Agentic SOC was built to operate at machine speed, moving most investigation work to AI while human analysts focus on threats requiring oversight and expertise. Within it, a patent-pending Swarm of Experts, a network of specialized AI agents, executes and validates work across major SOC functions.
The AI Trust Engine governs agent behavior, permitting autonomous action when confidence is high. Agents escalate uncertain, novel, or unvalidated cases to a security analyst, and each human decision becomes a learning signal that broadens what agents can resolve. The underlying Aurora Superintelligence Platform processes more than 10 trillion security events each week.
The report draws on data from more than 11,000 organizations across over 100 countries. Human-only investigations fell from 81% of caseload handled without AI assistance about a year earlier to 2%, while AI-human collaboration rose from under 1% to 38%. Monthly investigation volume grew 21%, alert volume fell 19%, and the time from an alert-generating event to an actionable ticket decreased 36%.
“The reality of today's threat landscape is that attackers are already operating at machine speed, and organizations can no longer rely on AI-only or human-only security operations to keep pace,” said Dan Schiappa, President of Technology and Services at Arctic Wolf.
Our summary. The original keeps its own byline.