A year ago I made an argument. This year, we measured it. Last summer I wrote about the Pyramid of Influence — the idea that in a Human-Augmented SOC, not all analyst feedback is equal. Clicking “False Positive” is Tier 1. It decorates the interface. But “FP because powershell.exe is patch automation on this host” […]
From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice Read More »
For decades, enterprise identity security was built around people. Employees logged in. Administrators received privileges. Contractors were provisioned and eventually removed. That model is changing fast. AI agents, bots, service accounts and other machine identities can authenticate to applications, call APIs, access data and take actions on behalf of people or businesses. If a machine
Your Next Identity May Not Be Human Read More »
Every security leader has heard the promise by now: AI will transform security operations. It will reduce alert fatigue. It will accelerate investigations. It will make analysts more productive. It will help teams do more with less. The promise is real, but there is a catch. AI does not improve security outcomes simply because a
Security Teams Do Not Need More AI Hype. They Need AI-Ready Workflows. Read More »
From AI Experiments to Autonomous Operations – Christophe Briguet, Sr. Director of Product Management – AI & Security Analytics, Stellar Cyber San Jose, Calif. – Apr. 28, 2026 Something shifted in early 2026. Not gradually — more like flipping a switch. For years, we talked about AI in the SOC the way we talked about
In this episode, we dive into the concept of the Model Context Protocol (MCP)—often described as the “USB for AI”—and how it enables seamless integration across tools like ticketing systems, security platforms, and knowledge bases.
Inside the Agentic Loop – Episode 2 | How MCP is Transforming SOC with AI Agents Read More »
In this episode of the Stellar Cyber Podcast, we dig into the Agentic Loop: what it means, how autonomous agents operate, and why this matters for security teams and organizations deploying AI. Our hosts explore real-world use cases, technical building blocks, associated risks and mitigation strategies, and what the future holds for agent-driven systems.
Inside the Agentic Loop — Go Autonomous. Stay Human. Read More »
Bullish on Autonomous SOC. Realist about what gets us there. There’s been plenty of talk lately about the Autonomous SOC — a future where machines don’t just alert but correlate, triage, investigate, and respond. It sounds fantastic, especially if you’ve ever worked the night shift buried in alerts. But here’s the truth: you can’t automate
In an era where Artificial Intelligence (AI) is revolutionizing every sector, including the field of cybersecurity, mastering AI is no longer optional—it’s a necessity. As the adage goes, “AI won’t replace you, but someone using AI will.” At Stellar Cyber, we have embraced this philosophy, integrating AI into every facet of our Security Operations Center
Having spent a significant amount of time in the SIEM industry, I’ve seen patterns and evolutions that define the landscape. One of the most notable changes has been the shift from traditional, monolithic SIEM deployments to more flexible, scalable solutions that allow organizations to adapt and grow without significant overhauls. The Evolution of SIEM Storage
Bring Your Own Data Lake: Do It The Right Way Read More »
Over the past two decades, Security Information and Event Management (SIEM) solutions have become integral to enterprise security strategies However, as new generations of SIEM technologies emerge, former leaders in the Gartner SIEM Magic Quadrant are often seen slipping from the top spots, if not completely disappearing. SIEM vendors might also acquire or merge, like
Flexibility in SIEM: Choosing the Right Deployment Model for Your Needs Read More »
