Stellar Cyber 7.0 Makes the Agentic SOC Measurable, Actionable and Operational at Scale

Milestone release connects AI-driven triage, investigation, response and SOC performance management to help security teams deliver measurable outcomes

San Jose, Calif., October 5, 2026 — Stellar Cyber, the AI-native security operations platform purpose-built for MSSPs and lean enterprise security teams, today announced Stellar Cyber 7.0, a milestone release that advances the Human-Augmented Autonomous SOC from a vision for applying AI to security operations into a practical operating model for running them.

Stellar Cyber 7.0 unifies AI-powered case triage, measurable SOC workflows, deeper investigative evidence, expanded automated response and new APIs for operating security at scale.

The result marks significant progress from simply using AI to help analysts work faster. Stellar Cyber 7.0 is will help security teams determine what matters, understand why it matters, take the right action and measure whether the SOC is actually improving.

“Security operations has spent years focused on collecting more data and generating more detections,” said Aimei Wei, Founder and CTO of Stellar Cyber. “The next era is about outcomes. Did we identify the real attack? How quickly did we understand it? Did we take the right action? And are we improving over time? Stellar Cyber 7.0 brings those pieces together so organizations can safely automate more of the SOC while keeping human judgment where it matters most.”

 

From AI Assistance to an Autonomous Operating Model

Stellar Cyber 7.0 embodies the evolving logic of AI in security operations. Rather than simply tacking on AI as productivity-enhancer, 7.0 integrates AI to uplevel your analysts strategically.

Organizations can now enable AI case analysis and automated triage at the case-queue level, so security teams can determine where autonomy should be applied rather than treating every incident the same way.

For an MSSP, this means automatically triaging high-priority cases across multiple customer environments before an analyst begins work. For a lean enterprise team, it means having critical cases already analyzed and prioritized. More mature SOCs can apply different levels of automation based on risk, customer requirements or workflow.

AI simply for AI’s sake is not enough. But if machines handle repetitive analysis, analysts can focus and refine their expertise on the decisions that carry the greatest risk and consequence.

 

Make SOC Performance Measurable

Autonomy without accountability is not enough.

Stellar Cyber 7.0 introduces Case Metrics, for organizations to measure important operational milestones such as the time from case creation to analyst acknowledgment or from creation to resolution.

Security leaders use those measurements to answer practical questions: Are critical cases being handled quickly enough? Is automation reducing investigation time? Where are operational bottlenecks developing? Are service levels improving?

For MSSPs in particular, this drives a stronger connection between AI-driven operations and the outcomes customers actually care about.

 

Put the Evidence and Response in the Workflow

Stellar Cyber 7.0 also gives analysts more of the evidence required to validate a threat directly within the investigation.

Expanded malware sandbox evidence, network payload visibility and access to the original records behind correlation-based detections reduce the need to move between multiple tools simply to reconstruct what happened.

Once a threat is understood, expanded integrations help analysts move directly from investigation to containment. New response capabilities with technologies including Microsoft Defender for Endpoint, Fortinet FortiGate and Cybereason broaden the actions teams can take from Stellar Cyber.

That reinforces a core principle behind Stellar Cyber’s Open XDR architecture: customers do not need to replace the security technologies they already trust to build a more autonomous SOC. Stellar Cyber can correlate the signals, help determine what matters and use existing controls as part of the response.

 

Operate the SOC at Machine Scale

For MSSPs and large enterprises, autonomy also means reducing the manual work required to operate the security platform itself.

Stellar Cyber 7.0 expands APIs for the System Action Center, sensor lifecycle management and other operational functions, allowing security teams to automate policies and administrative workflows across large environments.

Enhancements to Parser Studio also make it easier to manage, reuse and optimize parsers while adding support for additional security and infrastructure data sources.

Together, these capabilities allow organizations to operate security through consistent policy, automation and APIs instead of repetitive manual administration.

 

A Decade of Building Toward This Moment

Stellar Cyber began in 2015 around a simple idea: security teams needed AI to make sense of more data than humans could manually analyze.

That led to Open XDR, which brought together telemetry from customers’ existing security investments; machine-learning detection and correlation; integrated investigation and response; and, ultimately, Agentic AI capable of taking on more of the triage and investigation process.

Stellar Cyber 7.0 connects those investments into an operational loop: see the signal, understand the attack, prioritize what matters, act through the tools already in place and measure the result.

That is the Human-Augmented Autonomous SOC.

Stellar Cyber 7.0.0s is scheduled for software release on October 5, 2026.

Related Reading

About Stellar Cyber

Stellar Cyber is a full-cycle AI-native SecOps platform purpose-built for MSSPs and lean enterprise security teams. Since 2015, Stellar Cyber has helped organizations illuminate the darkest corners of cybersecurity to see every threat, know what matters most, and act with speed and confidence — always with the human in the loop.

By applying the right AI to the right problem, Stellar Cyber combines machine learning to uncover hidden anomalies, GraphML to connect relationships across entities and activity, LLMs to accelerate investigation and understanding, and agentic AI to guide triage and response — with human-augmented decision-making where expertise is essential. The result is real-world impact: analyst productivity improved by more than 80%, false positives reduced by over 90%, and security teams free to focus on what matters.

Stellar Cyber’s open SecOps platform unifies SIEM, NDR/OT, ITDR/UEBA, detection, investigation, triage, response, and Multi-Layer AI™ under one license. Stellar Cyber is trusted by one-third of the world’s top 250 MSSPs and over 15,000 organizations worldwide.

Learn more at stellarcyber.ai.

 

Stellar Cyber Media Inquiries:

Michelle Barry
Chameleon Collective for Stellar Cyber
Michelle.barry@chameleon.co
+1 (603) 809-2748

END

Scroll to Top