By Alex Smith |
Smarttech247 has launched an agentic security operations centre (SOC) capability within its VisionX platform, combining AI agents with human security analysts to handle the full lifecycle of a cybersecurity incident from detection through to remediation.
The launch comes as Smarttech247’s own threat intelligence data points to a shifting threat landscape. Identity-related activity accounted for 80 per cent of all incidents investigated in the first half of 2026, and the company recorded more campaigns targeting users of AI tools in the first ten weeks of 2026 than during the whole of 2025.
“Cybersecurity operations were built for a world of human-scale threats, fixed workflows and manageable alert volumes,” said Robert Kehoe, chief technology officer at Smarttech247. “That world no longer exists.”
The Agentic SOC is designed to address limitations in conventional security operations, where incidents are typically reconstructed after the fact and serious events require improvised responses with no documented trail. In the new model, cases are visible in VisionX as they unfold, pre-approved automated response actions allow containment to begin without manual intervention and a full audit trail records what was done and when. AI agents handle investigation, evidence correlation, timeline building and hypothesis testing, while human analysts retain control of high-impact remediation decisions.
“An AI world requires a new operating model, one where intelligent agents can investigate and coordinate at machine speed, while human experts provide judgement, oversight and accountability,” said Kehoe. “The agents handle the volume and the speed. Our analysts handle the decisions that matter, the ones with real consequences for our customers. That combination, not automation on its own, is what actually keeps organisations secure.”
The capability is built for Microsoft Security environments, drawing on signals across identity, email, endpoints and users.
“As organisations continue to adopt Microsoft Security tools such as Defender and Sentinel to strengthen their security operations, they're increasingly looking for ways to accelerate investigation and response without adding operational complexity”, said Clare Hillis, partner lead for Microsoft Ireland. “We're pleased to work with Smarttech247 as they help customers to respond faster, make more informed decisions, and strengthen cyber resilience through their VisionX Agentic SOC platform.”
The capability is available immediately for customers using Microsoft Sentinel, Defender for Endpoint, Cloud, Identity and Email, with a focus on regulated industries including financial services, healthcare, aviation, manufacturing and retail.