Radiant Security Launches AI-Powered SOC Co-Pilot

By Amit Chowdhry • Aug 15, 2023

Radiant Security recently announced that it entered the market with its AI-powered SOC co-pilot. And the industry-first solution empowers security operations centers (SOCs) to harness the power of AI to boost security analyst productivity, detect more real attacks, and reduce incident remediation times.

Despite decades of effort, SOCs still struggle to build effective security operations programs that are capable of preventing breaches due to an ongoing reliance on manual effort. And with increasing attack complexity, growing attack surfaces, and a declining supply of skilled analysts, the situation is only getting worse.

The current SOC model fails to overcome these crucial problems:

― Insufficient SOC Staffing – SOCs are often understaffed and struggling to complete workloads.

― Missing Real Threats – Real attacks are hidden in a sea of false positives and they are frequently missed, either partially or entirely.

― Slow and Incomplete Response – The prolonged detection and complex, manual processes result in prolonged dwell and remediation times. This enables adversaries to inflict more damage.

The Radiant co-pilot boosts SOC effectiveness and productivity by streamlining and automating:

― Alert triage to dynamically review every security alert for maliciousness and ensure no attack is missed.

― Incident investigation, root cause analysis, and incident scope to detect real incidents and help analysts know exactly what happened.

― Incident containment and remediation to reduce response times from days to minutes.

― Escalation & approval workflows to take corrective actions.

― Resiliency improvements to reduce the likelihood of incident recurrence.

The company helps SOCs find more attacks by deeply investigating every malicious alert. And the output of Radiant’s automated investigation is a decision-ready summary that provides analysts with crucial context such as the root cause, incident scope, and a complete map of the attack, even if it traverses multiple data sources, users, and hosts—so they can easily understand exactly what happened.

For every malicious incident detected, Radiant’s SOC co-pilot automatically builds a customized, incident-specific response plan that identifies security issues and the containment and remediation actions that address them. Analysts are enabled to rapidly respond to the incident via step-by-step remediation instructions, one-click remediation from the UI, or via fully automated response. The result is drastically reduced response times; from days to minutes.

KEY QUOTES:

“It was never feasible for SOC analysts to review every alert they received. There aren’t enough hours in the day or analysts in the SOC for this to work. Instead, alerts end up being filtered out or left unaddressed, thus creating blindspots where attacks can go undetected. SOCs need a way to accurately review every security alert, with the skill of their best analyst—AI makes this possible.”

— Barry Shteiman, CTO and Co-founder of Radiant Security

“With Radiant Security’s co-pilot, we can rest easy knowing that the repetitive and time-consuming work of triaging and investigating security alerts is being taken care of. Thanks to the visibility provided by Radiant, I trust that any incidents have been fully vetted by the system before they reach me.”

— Josh Lanners, Director, IT Operations & Security at Nutcracker Therapeutics

“SOCs don’t have the time, and in many cases, the skill needed to perform a proper investigation of every incident. Radiant makes it possible to do just that. And, by deeply scrutinizing every alert, SOCs can find more true threats and get more out of their existing security investments.”

— Shahar Ben-Hador, CEO and Co-founder of Radiant Security

“By using Radiant for triage and investigation, we were able to significantly reduce response times and improve our visibility into the scope of incidents and their affected systems. Our team no longer has to sift through countless alerts manually and can focus on more strategic initiatives.”

— Mike Butler, Director-Information Security Operations at Spellman High Voltage Electronics Corporation