SOCless

How Cato Networks and Stellar Cyber Can Provide MSSPs a Modern, Integrated Operating Model from the Edge to the SOC

MSSP, Security Operations Center (SOC), SIEM, SOC / /

SASE changed cybersecurity by challenging a basic assumption: that networking and security had to remain separate technology stacks. By converging connectivity, access and security policy into a cloud-delivered architecture, SASE simplified the edge and created richer context about users, applications, locations and activity. But for many organizations, that convergence has not extended into the broader

How Cato Networks and Stellar Cyber Can Provide MSSPs a Modern, Integrated Operating Model from the Edge to the SOC Read More »

PHP2Shell: Why Security Needs a Puppet Master

NDR, Security Operations Center (SOC), SOC, Vulnerability / /

Think about a marionette. What catches your eye is the puppet. But what explains its movement are the strings. Security operations can look remarkably similar. A vulnerability scanner knows a server is exposed. A firewall or WAF sees a suspicious request. Endpoint security notices a new process. Network detection sees an unusual connection. Identity systems

PHP2Shell: Why Security Needs a Puppet Master Read More »

AI’s Third Product-Market Fit Will Be Won in the SOC

AI-driven security, Security Operations Center (SOC), SIEM, SOC / /

Tomasz Tunguz recently argued that cybersecurity may become AI’s third major product-market fit, after coding and customer support. He’s not wrong, but his data points to something even more important for security teams: AI is arriving across parts of security operations that have traditionally been treated as separate disciplines. Tunguz’s analysis shows security spending across

AI’s Third Product-Market Fit Will Be Won in the SOC Read More »

The SIEM Problem Is an Architecture Problem. So Is the Answer.

NDR, Security Operations Center (SOC), SIEM, SIEM technology, SOC / /

For years, security teams tried to make the SIEM the center of the SOC. Send the data there. Normalize it. Index it. Detect against it. Search it. Investigate the alerts. Then connect the SIEM to another system for response. That model worked when security data volumes were smaller and the SOC technology stack was simpler.

The SIEM Problem Is an Architecture Problem. So Is the Answer. Read More »

SOC as Code: Why the Next Stage of Security Operations Is About Scale, Not More Screens

AI-driven security, Core Capabilities - Datasheets, Cybersecurity, Data Collection, Deployment Models - Datasheets, IT technology, MSSP, MSSPs, Security Operations Center (SOC), SOC / /

The security industry has spent decades improving what analysts can do inside a console. But for many of today’s security organizations—especially MSSPs—the bigger problem is no longer the individual console. It is scale. How do you enforce the same operating policy across dozens or hundreds of customer environments? How do you onboard new telemetry without

SOC as Code: Why the Next Stage of Security Operations Is About Scale, Not More Screens Read More »

From Alert Automation to Measurable Outcomes: What an Autonomous SOC Should Actually Deliver

AI-driven security, Artificial Intelligence, Cybersecurity, EDR - Endpoint detection and response, Incident Response, MSSP, MSSPs, NDR, Open XDR Platform, Security Operations Center (SOC), SOC, XDR / /

For years, security automation has been measured by activity. How many alerts did we enrich? How many playbooks ran? How many investigations did AI summarize? How many analyst clicks did we eliminate? Those are useful metrics—but they are not the outcome. The real questions are harder: Did we find the threats that mattered? Did we

From Alert Automation to Measurable Outcomes: What an Autonomous SOC Should Actually Deliver Read More »

From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice

AI-driven security, Artificial Intelligence, Machine Learning, Security Operations Center (SOC), SOC, SOCless / /

A year ago I made an argument. This year, we measured it. Last summer I wrote about the Pyramid of Influence — the idea that in a Human-Augmented SOC, not all analyst feedback is equal. Clicking “False Positive” is Tier 1. It decorates the interface. But “FP because powershell.exe is patch automation on this host”

From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice Read More »

Your Customers Already Have IAM. Turn Identity Signals Into Your Next Managed Service.

AI-driven security, Cyberattacks, Cybersecurity, Identity, Identity Threat Detection & Response (ITDR), MSSPs, Open XDR, Security Operations Center (SOC) / /

How MSSPs can use Stellar Cyber to package identity insight into a timely, scalable managed service that creates new recurring revenue and deeper customer value. The opportunity: turn identity telemetry customers already generate into a managed service that detects abnormal behavior, correlates it with the broader attack, guides response, and proves value with tenant-specific reporting.

Your Customers Already Have IAM. Turn Identity Signals Into Your Next Managed Service. Read More »

The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out

AI-driven security, Artificial Intelligence, Cybersecurity, MSSPs, Security Operations Center (SOC), SOC / /

Every security team wants better outcomes. Faster detection. Faster triage. Faster investigation. Faster response.But many teams are slowed down by a less visible problem: operational friction. A customer has a data source that is not supported yet. A parser needs to be built. A log format is messy. A hunting playbook works in one environment

The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out Read More »

The Human-augmented autonomous SOC: A Perfect Blend of Technology and Humanity

AI-driven security, Application Security, Artificial Intelligence, Cybersecurity, Security Operations Center (SOC), SOC / /

Just after the turn of the century, IBM introduced the term, ‘autonomic IT.” At the time, IBM’s perspective was that IT applications, networks, and systems had become too complex for humans to manage, monitor, or secure. IBM presented its autonomic IT concept, with a vision of IT systems that could manage themselves with advanced capabilities

The Human-augmented autonomous SOC: A Perfect Blend of Technology and Humanity Read More »

NDR is a Requirement for Modern Security Defenses and the Agentic SOC

AI-driven security, Artificial Intelligence, Cybersecurity, Network Security, Security Operations Center (SOC), security technology, SOC / /

Network Detection and Response (NDR) has been the Rodney Dangerfield of security tools over the past few years – “it don’t get no respect.” Conceivably, this state of disrepute came from all the marketing money thrown at Endpoint Detection and Response (EDR) and eXtended Detection and Response (XDR). It could also be related to growth

NDR is a Requirement for Modern Security Defenses and the Agentic SOC Read More »

Anthropic’s Mythos Preview just changed the threat landscape in ways the security industry isn’t fully prepared for

Application Security, Artificial Intelligence, Cybersecurity, Security Operations Center (SOC) / /

The attacker’s blind spot just disappeared Today’s attackers largely treat software as a black box. Some study open-source software (OSS) to tailor their techniques, but doing this at scale has always been practically impossible which created a natural ceiling on adversarial precision. Mythos removes that ceiling entirely. Because frontier LLMs are trained on virtually all

Anthropic’s Mythos Preview just changed the threat landscape in ways the security industry isn’t fully prepared for Read More »

Lights-Out SOC? Yes, It’s Coming (and Faster Than You Think)

Artificial Intelligence, Cybersecurity, MSSPs, Security Operations Center (SOC), SOC / /

Recognized by Fast Company, TAG is a trusted next generation research and advisory company that utilizes an AI-powered SaaS platform to deliver on-demand insights, guidance, and recommendations to enterprise teams, government agencies, and commercial vendors in cybersecurity and artificial intelligence, Download TAG Analyst Report Is the human-augmented autonomous SOC a contrarian idea or the next

Lights-Out SOC? Yes, It’s Coming (and Faster Than You Think) Read More »

Hyperautomation for Security Teams

AI-driven security, Artificial Intelligence, Cybersecurity, EDR - Endpoint detection and response, EDR Alerts, Security Operations Center (SOC) / /

Six years ago, we founded DTonomy, a security automation company. As security software engineers and data scientists who had worked at the forefront of security operations — from building large-scale AI-based EDR systems to managing daily security operations — we were acutely aware of the challenges security teams face. Triaging security alerts during national holidays,

Hyperautomation for Security Teams Read More »

Fighting AI with AI: Tools for the Twenty-First Century

AI-driven security, Artificial Intelligence, Breach Detection, Cloud Security, Cyberattacks, Cybersecurity, Data Breaches, MSSP, Open XDR, Open XDR Platform, Security Operations Center (SOC) / /

In a recent conversation with a major educational institution’s CIO, the following circumstance arises: a university administrator is hiring for a position; of over 300 resumes that he receives, 95% of them look so similar that they could have come from the same person. And in a way, they did. With the proliferation of AI-powered

Fighting AI with AI: Tools for the Twenty-First Century Read More »

Unpacking the 2023 Top 250 MSSPs Report

Application Security, Cyberattacks, Cybersecurity, IT technology, MSSP, MSSPs, NDR, Network Security, Open XDR, Open XDR Platform, Security Operations Center (SOC), SOC, SOCless / /

Recently, MSSP Alert published its yearly report on the Top 250 MSSPs. The report is chock-full of interesting information from a survey of MSSPs that makes it a worthwhile read. Below are a few key takeaways that anyone working with an MSSP, looking to become an MSSP, or an MSP seeking out an MSSP partner

Unpacking the 2023 Top 250 MSSPs Report Read More »

Considering an XDR Purchase? Here Are Our Lessons Learned.

EDR - Endpoint detection and response, EDR Alerts, MSSP, NDR, Security Operations Center (SOC), SOC, XDR / /

Lessons learned from our search for, and integration of, our XDR Trusted Internet is now deploying Stellar Cyber XDR –as a SOC-monitored solution or as an Infrastructure as a Service. The marketing hype around XDR is deafening for those of you considering an XDR. It’s hard to sort through the slick websites and marketing noise

Considering an XDR Purchase? Here Are Our Lessons Learned. Read More »

Network traffic analysis

MSSP Alert Live Recap

Case Studies - MSSP, Cyberattacks, Cybersecurity, MSSP, Open XDR, Open XDR Platform, Security Operations Center (SOC), security technology, Webinars - Events Category, XDR / /

I’m sure, like most people reading this blog, the past two-plus years for me were mainly spent in front of my computer, talking with my colleagues, customers, and prospects over Zoom (or your video conferencing provider of choice). So when the opportunity to attend the MSSP Alert Live event in Washington, DC came my way, I hopped

MSSP Alert Live Recap Read More »

Scroll to Top