MSSP

How Cato Networks and Stellar Cyber Can Provide MSSPs a Modern, Integrated Operating Model from the Edge to the SOC

MSSP, Security Operations Center (SOC), SIEM, SOC / /

SASE changed cybersecurity by challenging a basic assumption: that networking and security had to remain separate technology stacks. By converging connectivity, access and security policy into a cloud-delivered architecture, SASE simplified the edge and created richer context about users, applications, locations and activity. But for many organizations, that convergence has not extended into the broader

How Cato Networks and Stellar Cyber Can Provide MSSPs a Modern, Integrated Operating Model from the Edge to the SOC Read More »

PHP2Shell: Why Security Needs a Puppet Master

NDR, Security Operations Center (SOC), SOC, Vulnerability / /

Think about a marionette. What catches your eye is the puppet. But what explains its movement are the strings. Security operations can look remarkably similar. A vulnerability scanner knows a server is exposed. A firewall or WAF sees a suspicious request. Endpoint security notices a new process. Network detection sees an unusual connection. Identity systems

PHP2Shell: Why Security Needs a Puppet Master Read More »

AI’s Third Product-Market Fit Will Be Won in the SOC

AI-driven security, Security Operations Center (SOC), SIEM, SOC / /

Tomasz Tunguz recently argued that cybersecurity may become AI’s third major product-market fit, after coding and customer support. He’s not wrong, but his data points to something even more important for security teams: AI is arriving across parts of security operations that have traditionally been treated as separate disciplines. Tunguz’s analysis shows security spending across

AI’s Third Product-Market Fit Will Be Won in the SOC Read More »

The SIEM Problem Is an Architecture Problem. So Is the Answer.

NDR, Security Operations Center (SOC), SIEM, SIEM technology, SOC / /

For years, security teams tried to make the SIEM the center of the SOC. Send the data there. Normalize it. Index it. Detect against it. Search it. Investigate the alerts. Then connect the SIEM to another system for response. That model worked when security data volumes were smaller and the SOC technology stack was simpler.

The SIEM Problem Is an Architecture Problem. So Is the Answer. Read More »

SOC as Code: Why the Next Stage of Security Operations Is About Scale, Not More Screens

AI-driven security, Core Capabilities - Datasheets, Cybersecurity, Data Collection, Deployment Models - Datasheets, IT technology, MSSP, MSSPs, Security Operations Center (SOC), SOC / /

The security industry has spent decades improving what analysts can do inside a console. But for many of today’s security organizations—especially MSSPs—the bigger problem is no longer the individual console. It is scale. How do you enforce the same operating policy across dozens or hundreds of customer environments? How do you onboard new telemetry without

SOC as Code: Why the Next Stage of Security Operations Is About Scale, Not More Screens Read More »

From Alert Automation to Measurable Outcomes: What an Autonomous SOC Should Actually Deliver

AI-driven security, Artificial Intelligence, Cybersecurity, EDR - Endpoint detection and response, Incident Response, MSSP, MSSPs, NDR, Open XDR Platform, Security Operations Center (SOC), SOC, XDR / /

For years, security automation has been measured by activity. How many alerts did we enrich? How many playbooks ran? How many investigations did AI summarize? How many analyst clicks did we eliminate? Those are useful metrics—but they are not the outcome. The real questions are harder: Did we find the threats that mattered? Did we

From Alert Automation to Measurable Outcomes: What an Autonomous SOC Should Actually Deliver Read More »

From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice

AI-driven security, Artificial Intelligence, Machine Learning, Security Operations Center (SOC), SOC, SOCless / /

A year ago I made an argument. This year, we measured it. Last summer I wrote about the Pyramid of Influence — the idea that in a Human-Augmented SOC, not all analyst feedback is equal. Clicking “False Positive” is Tier 1. It decorates the interface. But “FP because powershell.exe is patch automation on this host”

From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice Read More »

The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out

AI-driven security, Artificial Intelligence, Cybersecurity, MSSPs, Security Operations Center (SOC), SOC / /

Every security team wants better outcomes. Faster detection. Faster triage. Faster investigation. Faster response.But many teams are slowed down by a less visible problem: operational friction. A customer has a data source that is not supported yet. A parser needs to be built. A log format is messy. A hunting playbook works in one environment

The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out Read More »

Detection Fidelity Is the New SecOps Efficiency Metric

Cybersecurity, Identity Threat Detection & Response (ITDR), Network Security, SOC / /

Security teams have spent years collecting more data, generating more alerts, and covering more attack surfaces. But more is not always better. More alerts can mean more noise. More detections can mean more false positives. More telemetry can mean more data to search, store, normalize, and explain. For MSSPs, that creates margin pressure. For lean

Detection Fidelity Is the New SecOps Efficiency Metric Read More »

Security Teams Do Not Need More AI Hype. They Need AI-Ready Workflows.

AI-driven security, Application Security, Artificial Intelligence, MSSP / /

Every security leader has heard the promise by now: AI will transform security operations. It will reduce alert fatigue. It will accelerate investigations. It will make analysts more productive. It will help teams do more with less. The promise is real, but there is a catch. AI does not improve security outcomes simply because a

Security Teams Do Not Need More AI Hype. They Need AI-Ready Workflows. Read More »

When Your SOC Analyst is Also a Bot: AI Agents, MCP, and Many Automation Opportunities in Your Security Operations

AI-driven security, Artificial Intelligence, Cybersecurity, SOC / /

From AI Experiments to Autonomous Operations – Christophe Briguet, Sr. Director of Product Management – AI & Security Analytics, Stellar Cyber San Jose, Calif. – Apr. 28, 2026 Something shifted in early 2026. Not gradually — more like flipping a switch. For years, we talked about AI in the SOC the way we talked about

When Your SOC Analyst is Also a Bot: AI Agents, MCP, and Many Automation Opportunities in Your Security Operations Read More »

The Human-augmented autonomous SOC: A Perfect Blend of Technology and Humanity

AI-driven security, Application Security, Artificial Intelligence, Cybersecurity, Security Operations Center (SOC), SOC / /

Just after the turn of the century, IBM introduced the term, ‘autonomic IT.” At the time, IBM’s perspective was that IT applications, networks, and systems had become too complex for humans to manage, monitor, or secure. IBM presented its autonomic IT concept, with a vision of IT systems that could manage themselves with advanced capabilities

The Human-augmented autonomous SOC: A Perfect Blend of Technology and Humanity Read More »

NDR is a Requirement for Modern Security Defenses and the Agentic SOC

AI-driven security, Artificial Intelligence, Cybersecurity, Network Security, Security Operations Center (SOC), security technology, SOC / /

Network Detection and Response (NDR) has been the Rodney Dangerfield of security tools over the past few years – “it don’t get no respect.” Conceivably, this state of disrepute came from all the marketing money thrown at Endpoint Detection and Response (EDR) and eXtended Detection and Response (XDR). It could also be related to growth

NDR is a Requirement for Modern Security Defenses and the Agentic SOC Read More »

Building the Right Foundation for the Future SOC

EDR - Endpoint detection and response, EDR Alerts, NDR, SIEM, SIEM technology, SOC / /

Why SIEM + NDR + Any EDR Is the Strongest Path to a Human-Augmented Autonomous SOC Every security leader faces the same question: what should be at the core of a modern SecOps platform? CrowdStrike, SentinelOne, and others argue for an endpoint-first approach: start with EDR, then bolt on SIEM and any NDR. At Stellar

Building the Right Foundation for the Future SOC Read More »

Lights-Out SOC? Yes, It’s Coming (and Faster Than You Think)

Artificial Intelligence, Cybersecurity, MSSPs, Security Operations Center (SOC), SOC / /

Recognized by Fast Company, TAG is a trusted next generation research and advisory company that utilizes an AI-powered SaaS platform to deliver on-demand insights, guidance, and recommendations to enterprise teams, government agencies, and commercial vendors in cybersecurity and artificial intelligence, Download TAG Analyst Report Is the human-augmented autonomous SOC a contrarian idea or the next

Lights-Out SOC? Yes, It’s Coming (and Faster Than You Think) Read More »

Scroll to Top