Agentic AI Could Revolutionize Managed Detection and Response

Agentic AI systems are designed to pursue defined goals, assess information, make decisions, and interact with other systems with varying degrees of autonomy. This could enable AI agents to investigate suspicious activity, correlate information, and recommend or initiate responses in MDR environments. The technology could significantly cut down the time between identifying a threat and reacting to it, allowing security teams to focus on complex investigations and strategic decision-making.

However, greater autonomy also raises important questions about trust and responsibility. Can organizations trust AI to make security decisions that could disrupt business operations? What happens when an automated response incorrectly isolates a critical system or blocks legitimate business activity?

The human cyber security professional will not disappear, as AI lacks complete business understanding, contextual awareness, and judgement. A security system may identify unusual activity, but a human analyst may understand the consequences of isolating a device that supports a critical business process.