Exabeam Expands AI-Powered Security Operations with New Agentic SOC Capabilities

BROOMFIELD, Colo., October 1, 2026 — Cybersecurity company Exabeam has announced a new set of capabilities aimed at advancing the use of artificial intelligence in security operations, bringing AI-assisted investigation, execution, monitoring and governance to both cloud and on-premises environments.

The company said the new capabilities are designed to help security teams respond to increasingly automated and machine-speed threats while retaining human oversight in critical security decisions.

Exabeam’s latest developments build on more than a decade of work in machine learning and user and entity behavior analytics (UEBA). The company has expanded this foundation in recent years through generative AI, its Nova AI platform, the Exabeam Model Context Protocol (MCP) Server and Agent Behavior Analytics (ABA), which extends behavioral monitoring to AI agents as well as human users.

“The next generation of the SOC won’t be defined by more alerts or more automation. It will be defined by how effectively people and AI agents work together,” said Steve Wilson, Chief AI and Product Officer at Exabeam.

Nova AI expands automated investigation

Among the new capabilities is an expanded version of Exabeam Nova AI, which can operate as a persistent investigator across the platform. The system can gather additional context, conduct secondary searches and retrieve entity profiles as an incident develops.

According to Exabeam, its internal security operations team found that Nova AI could triage an average case in approximately 10 minutes, compared with an estimated five hours for a human analyst. The platform has also introduced Related Cases, which groups connected incidents to provide analysts with a broader view of an investigation.

Exabeam has also introduced an Agentic SOC Plugin for Anthropic Claude Code and OpenAI Codex. The plugin enables analysts to use natural-language commands to support alert triage, case prioritization and investigation. The company said the plugin is the first in a planned series of capabilities available through its Agent Skills Marketplace.

Greater visibility into enterprise AI activity

The company is also expanding its integration with Claude Enterprise, with the aim of providing security teams greater visibility into AI-agent activity.

The integration brings prompts, tool calls and actions into a consolidated timeline. Exabeam said event-time analysis and behavior-based correlation can help identify unauthorized AI agents and changes in agent behavior.

For security executives, the company has introduced Executive Digest and Outcomes Navigator Overrides. Executive Digest provides security metrics intended for management and board-level reporting, while Outcomes Navigator allows organizations to customize risk scoring and maintain separate compliance metrics across business units.

Eduardo Sulvarán Velázquez, Subdirector Cyber Risk Management at E-Global, said Nova AI had helped the organization prioritize cases and provide analysts with faster access to investigative context while retaining human decision-making.

LogRhythm brings AI-assisted security operations on-premises

Exabeam also announced developments for organizations that retain security data and AI workloads within their own infrastructure.

The updated LogRhythm SIEM Platform introduces AI-assisted security operations for on-premises environments. New generative AI collectors for ChatGPT, Google Gemini and GitHub Copilot are designed to provide centralized visibility into enterprise AI activity through LogRhythm Intelligence Analytics.

A new community Model Context Protocol (MCP) server will allow organizations to query, investigate and triage security data using locally deployed generative AI models without transferring that data outside the organization’s environment.

The platform has also been modernized through an in-place migration from Elasticsearch to OpenSearch. Exabeam said the change is intended to improve scalability and performance while supporting a new self-service reporting engine and AI governance and compliance reporting capabilities.

Open-source security initiative expands

Exabeam said its Open Agent and AI Security Community, launched in June 2026, has recorded more than 10,000 downloads. The initiative brings together security practitioners, researchers and engineers working on security issues associated with AI agents and autonomous systems.

The company said the community remains open to practitioners and developers interested in contributing to the development of agent and AI security practices.

Exabeam, which serves more than 3,000 enterprises globally, specializes in security analytics, user and entity behavior analytics and agent behavior analytics. Its latest product developments reflect the company’s broader strategy of applying AI to security investigation while maintaining human oversight and organizational control.