Managed SIEM, agentic AI security, and KYC sandbox updates - Week of May 5, 2025

Overview of Recent Activity

During the reporting period, multiple organizations announced security and compliance updates that focused on continuous risk management, unified remediation, agentic AI for threat response, and expanded coverage for security operations. Product and platform releases also targeted data center operations, including liquid cooling distribution units, and network observability improvements through deduplication and packet capture features.

Key Themes and Developments

Technology Releases & Product Enhancements

Capgemini introduced a perpetual KYC (pKYC) sandbox for shifting from traditional Know-Your-Customer (KYC) processes to continuous compliance and event-based reviews. The sandbox enabled testing of pKYC transitions and automatic alerts for changes in a customer’s circumstances that may influence their risk profile.

Huntress released a Managed SIEM service at RSA Conference, with enhanced log ingestion, continuous monitoring from the Huntress SOC, and investigation workflows. In a deployment example, the service uncovered an RDP brute force attack within 15 hours.

Acceldata launched Adaptive AI Anomaly Detection integrated into its xLake Reasoning Engine to identify multi-dimensional data anomalies and support autonomous detection and remediation. Rapid7 introduced unified threat-informed remediation enhancements in its Command Platform, including AI-powered triage and a Breach Protection Warranty with up to $1 million coverage.

Partnerships & Ecosystem Engagement

Cribl partnered with Palo Alto Networks to integrate data onboarding and accelerate transitions from traditional SIEM to Cortex XSIAM for AI-driven SecOps. The integration was described as enabling a secure upgrade and quicker proof of concept assessments through improved data collection, searching, and routing.

Arctic Wolf announced a collaboration with Anthropic to develop autonomous SecOps Centers, combining Arctic Wolf’s Aurora Platform with Anthropic language models. The initial result included Cipher, an AI security assistant integrated into the Aurora Platform.

Infrastructure, Platform, or Deployment Updates

Flex’s JetCool unveiled the SmartSense Coolant Distribution Unit (CDU) for liquid-to-liquid cooling in high-density data centers. The unit supported up to 300kW in a single rack, allowed inlet temperatures exceeding 60°C, and worked alongside SmartPlate cold plates.

Separate observability-related releases focused on reducing redundant traffic and improving packet analysis. A Network Observability DeDuplication approach described filtering and deduplication with real-time granularity up to 8 milliseconds, while Aviz Service Nodes R2.0 added packet deduplication, advanced deep packet inspection, and enhanced packet capture controls.

Full Update Index

Capgemini perpetual KYC sandbox; Huntress Managed SIEM; Acceldata Adaptive AI anomaly detection; Rapid7 Command Platform remediation enhancements; Varonis agentic AI in MDDR; Flex SmartSense CDU; Network Observability DeDuplication approach; Aviz Service Nodes R2.0; CISA adds vulnerabilities to KEV catalog; BAE Systems FORGE ground system selection; Cequence Unified API Protection enhancements for agentic AI; Arctic Wolf warranty and autonomous SOC collaboration, plus Cipher; Apiiro Software Graph Visualization; Fortinet 2025 threat landscape report; Cribl and Palo Alto Networks SecOps partnership; Aqua Security Secure AI; Varonis AI Shield; Gilat investor conference participation.

1. Capgemini unveils perpetual KYC sandbox for financial institutions
   Capgemini has launched a perpetual KYC sandbox to aid financial institutions in achieving continuous compliance and improved risk management.
2. Huntress unveils Managed SIEM for broader cybersecurity access
   Huntress launched its Managed SIEM solution to reduce the complexity and costs of traditional SIEM offerings.
3. Acceldata launches adaptive AI anomaly detection capability
   Acceldata introduces Adaptive AI Anomaly Detection to autonomously manage complex data anomalies and enhance operational efficiency.
4. Rapid7 launches unified threat-informed remediation enhancements
   Rapid7 enhances its Command Platform with unified remediation capabilities and a Breach Protection Warranty for security teams.
5. Varonis integrates agentic AI into Managed Data Detection and Response
   Agentic AI enables Varonis to autonomously manage data threats, streamlining triage and incident response for clients.
6. Flex unveils SmartSense Coolant Distribution Unit for data centers
   At the 2025 OCP Summit, Flex presents its SmartSense CDU, a solution designed for scalable liquid cooling in data centers.
7. Network Observability DeDuplication in Data Centers
   Redundant network traffic leads to inefficiencies. Network Observability DeDuplication enhances efficiency and analytics accuracy.
8. Aviz Service Nodes R2.0 Enhances Network Capabilities
   ASN 2.0 improves efficiency, allowing users to streamline operations with enhanced network observability.
9. The status quo of not innovating in network observability
   Aviz offers a new approach to network observability, emphasizing multi-vendor support and AI integration for better performance.
10. CISA Adds Three Known Exploited Vulnerabilities to Catalog
    CISA added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, indicating active exploitation risks.
11. BAE Systems selected to enhance ground system for Space Force missile warning satellites
    BAE Systems will provide a satellite command and control system for the U.S. Space Force's FORGE program, integrating various applications.
12. Cequence Security enhances Unified API Protection for agentic AI
    CEO Ameya Talwalkar highlights the platform's role in safeguarding sensitive information amid the rise of agentic AI.
13. Arctic Wolf increases security operations warranty to $3 million
    Arctic Wolf raises its Security Operations Warranty to $3 million for Aurora Endpoint Defense customers, enhancing its value proposition.
14. Arctic Wolf and Anthropic partner to develop autonomous security operations center.
    Arctic Wolf collaborates with Anthropic for the development of advanced autonomous SOCs, introducing the AI assistant Cipher.
15. Arctic Wolf debuts Cipher, an AI security assistant integrated in Aurora Platform
    Arctic Wolf has launched Cipher, an AI security assistant for enhanced investigations and insights within the Arctic Wolf Aurora Platform.
16. Apiiro debuts Software Graph Visualization for improved security risk management
    Apiiro introduces Software Graph Visualization for real-time software risk assessment and management, improving security processes.
17. Fortinet releases 2025 Global Threat Landscape Report detailing rise in cybercrime and AI usage in attacks
    Findings suggest a significant increase in the use of AI in cybercrime, driving phishing effectiveness and evasion tactics.
18. Cribl partners with Palo Alto Networks to enhance AI-driven SecOps
    Cribl and Palo Alto Networks form a strategic partnership to enhance AI-driven security operations and upgrade to Cortex XSIAM.
19. Aqua Security Unveils Secure AI for Full Lifecycle Protection
    Aqua Security launched Secure AI, a full lifecycle solution ensuring comprehensive protection for AI applications during development and production.
20. Varonis introduces AI Shield: Always-On AI risk defense
    The new AI Shield by Varonis provides real-time risk analysis and automated remediation to improve AI data security.
21. Gilat Satellite Networks to participate in Needham Conference on May 13, 2025
    CEO Adi Sfadia and CFO Gil Benyamini will be available for one-on-one investor meetings during the Needham event.