Context-aware recommendations and AI-augmented reporting bring Hero AI into the heart of SecOps, saving customers millions in security operation costs

BLACK HAT 2024 -- Swimlane, automation for the entire security organization, today unveiled groundbreaking Hero AI innovations that shatter the mold of traditional security operations, empowering security teams to take decisive action against even the most complex cases, alerts and intelligence at unprecedented speed.

Hero AI expands case summarization capabilities with context-aware recommendations, informed by cybersecurity frameworks and customers' own knowledge base best practices or processes. AI-driven case summaries and recommended actions are now included in AI-augmented post-incident reporting, instantly available in any language, ensuring global collaboration across teams, stakeholders and clients.

Unlocking AI-Enhanced SOC Efficiency and Cost Savings

Staffing shortages often force SOC teams to rely on expensive contractors, straining already tight security budgets. A recent TAG Cyber report found Swimlane Turbine’s AI-enhanced security automation solutions can boost productivity by 20%, above automation alone, potentially eliminating the need for costly consultants and delivering significant cost savings.

“Organizations can no longer afford not to implement AI-powered automation tools to optimize efficiency,” said Edward Amoroso, founder and CEO of TAG Cyber. “Swimlane's platform is a compelling choice for simplifying complex legacy systems and driving significant ROI by expanding automation use cases beyond the SOC. Consider that a typical 20-person SOC, with an average salary of $250,000 per employee, incurs a $5 million annual staff budget. A 20% productivity boost could yield $1 million in savings.”

This economic rational combined with Swimlane’s customer base being made up of over 40 Fortune 500 companies, 26 U.S. federal agencies, and five of the world's top 10 solutions integrators, it’s clear to see how Turbine saves customers millions and is revolutionizing the cybersecurity industry.

“As AI transforms the business landscape, Security Operation Centers (SOCs) must adapt from traditional manual processes or be left behind,” said James Brear, CEO of Swimlane. “Swimlane recognizes this urgency and has spearheaded the development of a next-generation AI-enhanced security automation solution. Our technology is purpose-built to address the unique threat challenges and harness the immense potential of intelligent automation within the modern SOC.”

Key updates include:

• Context-Aware Recommended Actions: This expansion of Hero AI's advanced case summarization leverages cybersecurity frameworks like NIST CSF and MITRE ATT&CK, and insights from customers' own best practices, to provide concise context-aware recommended actions to resolve active cases or incidents.
• AI-Augmented Reporting: Take Hero AI case summaries a step further with stakeholder-ready after-action reports which can be prepared in a single click. AI-augmented reporting saves time and enables security leaders to seamlessly communicate regardless of the stakeholder’s technical skill level or preferred language location with the ability to translate reports into any language instantly.
• Multilingual Reporting and Documentation: Hero AI can now effortlessly translate Swimlane knowledge center documentation and after actions reporting into any language, enabling MSSPs to seamlessly support customers worldwide and ensuring every team member, stakeholder, or client within an organization can access vital information in their preferred language.

Securing the Future of AI-Powered SecOps

Datasets play a fundamental role in building AI models, and their privacy and security are paramount for the effective use of AI in SecOps. Swimlane's Hero AI learning algorithms are built upon a foundation of relentless innovation that never compromises on security. The multi-agent architecture of Swimlane's Hero AI is designed to safeguard sensitive customer data, ensuring it's neither centrally stored nor used to train shared models.

Instead, Swimlane Hero AI encompasses intelligence from industry standards such as MITRE and NIST, advanced methods like Retrieval Augmented Generation (RAG) and multi-agent systems, as well as Low-Rank Adaptation (LORA) and Quantized Low-Rank Adaptation (qLORA) techniques for efficient fine-tuning and use of its foundational LLMs. This enables Hero AI to gain a deep understanding of the security environment and adapt quickly, even against zero days that may not be present in training data.

“In an era where every product claims to be AI-powered, Swimlane’s data visibility sets us apart,” said Cody Cornell, co-founder and chief strategy officer of Swimlane. “With Turbine’s cloud-native architecture we have an unique ability to see how thousands of users are interacting with millions of security alerts, across hundreds of different technologies, giving us an unprecedented ability to build automation and AI capabilities that radically improve the lives of security teams.”

Ultimate Simplicity Fuels Limitless SecOps Improvement

Hero AI supports infinite security operations use cases within Swimlane Turbine. Popular use cases include:

• Analyze Phishing Attempts: AI that assesses the intent of an email and its potential for phishing in seconds, offering a clear probability rating and a transparent breakdown of the factors influencing that decision.
• Real-Time Insights Via MITRE ATT&CK: Hero AI can aggregate data from MITRE ATT&CK and analyze it to determine the most frequently occurring attack techniques within the organization. Based on those findings, it can provide actionable recommendations to enhance security.
• Go Beyond the Headlines: Craft prompts that distill the day's top cybersecurity news into concise summaries, analyze relevant threat data shared, and provide a ranked list of the most critical assets based on their value, sensitivity, and potential risk exposure.

Availability

These latest Hero AI advancements are available today.

To learn more about Hero AI and take a guided tour, visit: https://swimlane.com/platform/ai/

Key Resources

• Visit the Swimlane team at this year’s Black Hat USA August 5-8 at the Mandalay Bay Convention Center in Las Vegas, Booth #2922
• Join our Black Hat customer panel August 8, 11:25-12:15 PT, to hear experts get real about where AI can help SecOps
• Download the TAG Cyber Analyst Report: swimlane.com/resources/reports/tag-ai-secops-automation/
• Take a guided tour of popular Hero AI use cases at swimlane.com/resources/demo-center

About Swimlane

Swimlane delivers automation for the entire security organization. Swimlane Turbine is the AI-enhanced low-code security automation platform that unifies security teams, tools, and telemetry in-and-beyond the SOC into a single system of record to reduce process and data fatigue while quantifying business value and ensuring overall security effectiveness.

Learn more: swimlane.com

Request a Demo: swimlane.com/demo

View source version on businesswire.com: https://www.businesswire.com/news/home/20240805309547/en/