Pondurance Launches Kanati Agentic AI for SOC Operations

Pondurance has introduced Pondurance Kanati, an agentic artificial intelligence platform designed for autonomous operations within a Security Operations Center. The technology integrates with the company’s existing Managed Detection and Response services to automate complex investigation and remediation tasks. By deploying independent AI agents, the system handles workflows that previously required significant manual effort from security analysts. This development addresses the growing need for rapid response in an environment where cyberattacks are increasingly automated and sophisticated.

Autonomous Security Operations

The Kanati platform uses specialized AI agents to manage specific stages of the incident response process. These agents perform tasks such as data collection and initial forensic analysis without constant human oversight. This architecture allows the system to process large volumes of telemetry data from diverse network environments. It specifically targets log files, network traffic, and endpoint activity to identify hidden threats.

Organizations working with Pondurance can utilize these autonomous agents to monitor endpoints and cloud infrastructure. The technology identifies patterns of malicious activity that might bypass traditional detection methods. This approach shifts the focus from reactive alerting to proactive threat containment. It ensures that security perimeters remain defended even when human teams are offline.

The system operates by breaking down security incidents into logical steps and assigning them to the most appropriate AI agent. Each agent possesses specific capabilities tailored to distinct security domains like identity management or cloud security. This modular design ensures that the platform remains effective as an organization's digital footprint expands. It also allows for the rapid addition of new capabilities as attack vectors evolve.

These agents communicate with one another to share context and insights during an ongoing investigation. This collaborative intelligence ensures that no single data point is analyzed in isolation. By correlating disparate events, the platform can uncover multi-stage attacks that appear harmless when viewed individually. This level of coordination mimics the decision-making process of a senior security professional.

"Kanati represents a fundamental shift in how we approach managed security services. By deploying autonomous agents, we enable our clients to respond to threats at machine speed, significantly reducing the window of opportunity for attackers."

— Doug Howard, CEO at Pondurance

Improving Incident Response Metrics

A primary objective of the Kanati platform is the reduction of mean time to detect and mean time to respond. Automated workflows handle the heavy lifting of evidence gathering, which often consumes the majority of an analyst's time. This efficiency allows human teams to focus on high-level strategy and complex mitigation. Reducing these timeframes is essential for preventing data exfiltration during a breach.

The platform integrates with existing security stacks to provide a unified view of the threat environment. It ingests data from firewalls, email gateways, and identity management systems to build a complete picture of an attack. This cross-platform visibility helps prevent lateral movement by attackers within a compromised network. It also simplifies the management of third-party security tools through a single interface.

Security leaders face increasing pressure to demonstrate the value of their technology investments. Kanati provides detailed reporting on automated actions taken and threats neutralized. These metrics help executives understand their current security posture and identify areas for future defensive improvements. The data also assists in meeting regulatory compliance requirements for incident reporting.

The use of agentic AI also helps mitigate the effects of burnout among security professionals. By removing the burden of repetitive tasks, the platform allows analysts to engage in more complex problem-solving. This improvement in the work environment can help companies retain their top cybersecurity talent. It creates a more sustainable model for long-term security operations.

As cyber threats become more sophisticated, the adoption of autonomous security tools appears set to increase across the industry. Pondurance positions Kanati as a solution for businesses that need high-level protection without the overhead of a massive internal security team. The platform's ability to execute complex reasoning tasks marks a significant development in the application of AI for defense. Future updates will likely expand the range of autonomous actions these agents can perform across different industry verticals.