Proofpoint Introduces SOC Analyst Agent With OpenAI Daybreak Models

Proofpoint, Inc. introduced the Proofpoint SOC Analyst Agent, an agentic AI capability intended to support security teams when investigating threats. The company said it was built to help analysts work with Proofpoint security data to move from security signals to actionable findings.

As alerts and security data expanded across tools and workflows, the company said security operations teams increasingly used AI-enhanced capabilities to triage and investigate alerts. It said SOC teams still needed to connect signals across security systems, establish context, and decide what to address next.

Proofpoint said the SOC Analyst Agent planned investigations and drew context from connected Proofpoint security data, including alerts, logs, data loss prevention events, and user risk signals. The agent let analysts use natural language to synthesize findings and resolve issues, and Proofpoint said findings were traceable to underlying source data for validation.

Proofpoint described three core capabilities for the agent: accelerating investigations using natural language across connected Proofpoint products; automating recurring analysis through scheduled workflows; and keeping analysts in control by making the agent not independently make account changes, contain threats, or initiate consequential remediation actions. The company said the agent joined the OpenAI Daybreak Defense Network in June 2026 and was in private preview with select beta customers, with general availability expected by the end of Q3 2026.

Daniel Rapp, Chief Data and AI Officer at Proofpoint, said, “The challenge for security teams is to cut through the noise to quickly identify which signals matter and reach a defensible decision fast enough to act,” and added, “The Proofpoint SOC Analyst Agent brings together our security expertise and data with advanced AI reasoning from OpenAI to give analysts a faster path from investigation to action, while keeping people in control of consequential security decisions.” McCall McIntyre, Head of Global Cyber Partnerships, OpenAI, said, “Our goal through the OpenAI Daybreak Defense Network is to give defenders the advantage of frontier AI, safely,” and added, “Proofpoint’s SOC Analyst Agent shows how frontier AI can help defenders move faster without giving up control. By combining Proofpoint’s security data and human-behavior expertise with OpenAI’s Daybreak models, analysts can turn fragmented signals into clearer findings, faster investigations, and recommended next steps they can trust.”

Proofpoint also said it was exploring additional defensive security workflows supported by OpenAI Daybreak models across threat research, data security, and AI security.

Press release, provided by Globe Newswire on behalf of Proofpoint. Read the original.