Securonix, Inc., has announced Securonix Advanced Behavioral Analytics (ABA), a new capability designed to help security teams identify activity that is technically permitted but operationally abnormal at machine speed. ABA incorporates Agent and Entity Behavior Analytics (AEBA) to detect when an enterprise AI agent uses an unexpected tool, accesses data beyond its intended purpose or deviates from its established operating patterns. By correlating these changes with identity, authority, data usage, asset sensitivity, timing and threat context, the solution helps analysts determine what has changed, assess its significance and identify appropriate next steps.
Compromised accounts, insider threats and AI agents can exhibit behavior that appears legitimate when individual events are examined separately. Securonix Advanced Behavioral Analytics combines AEBA with User and Entity Behavior Analytics (UEBA), connecting anomalies such as unusual login times, increased data access and interactions with sensitive assets across systems and over time. This combined approach enables analysts to investigate emerging risks rather than isolated alerts, maintaining contextual visibility throughout detection, investigation, case management and governed response. Policies, approvals and audit records remain visible and enforceable at every stage.
“AI is compressing the time between initial access and business impact, while security leaders remain accountable for the decisions made under that pressure,” said Toby Weiss, Chief Executive Officer of Securonix. “Securonix Advanced Behavioral Analytics helps analysts identify meaningful behavioral change earlier and gives them clear control over how AI supports the response. Consequential response actions remain subject to human approval.”
Detect AI-Accelerated Attacks and Govern the Response
Traditional Security Information and Event Management (SIEM) platforms were designed to collect and correlate human and machine activity before enterprise AI agents became part of the attack surface. Securonix extends behavioral baselines and risk detection across users, identities, assets, applications, cloud environments and AI agents. By correlating signals across systems and over time, the platform helps identify compromised identities, unusual access patterns, privilege misuse, sensitive data exposure and abnormal AI agent activity. An expanding catalog of AI-threat policies supports the detection of established attack techniques, including AI-compressed reconnaissance, exploit development, privilege escalation and data movement.
Sam, the AI SOC Analyst, automates repeatable Tier 1 and Tier 2 tasks, including triage, investigation, evidence collection and case creation. The Agentic Mesh coordinates AI-assisted workflows, while Agentic Guardrails ensure actions remain governed by policy, visible and auditable. Analysts retain responsibility for reviewing and approving consequential response actions. By handling repetitive tasks, Sam helps security teams manage increasing alert volumes and expand Security Operations Center (SOC) capacity without a corresponding increase in headcount.
For authorized insider-risk investigations, the Securonix Insider Intent Agent contributes contextual and corroborating evidence while preserving alternative explanations. Analysts evaluate each signal within the broader body of evidence rather than interpreting an individual message, search or behavioral deviation as conclusive proof of intent.
“In a managed SOC, the hardest part isn’t writing detection rules. It’s understanding each customer’s environment well enough to separate real threats from normal activity. That becomes even harder in cloud and Infrastructure-as-Code environments, where workloads appear and disappear and identities constantly change.” said Darren Humphries, Group CISO, Acora. “Securonix Threat Analytics builds that behavioral baseline automatically, then uses risk scoring and evidence boards to show our analysts what matters and why. For Acora’s customers, that means fewer false positives, faster investigations and quicker containment, without losing the customer context that makes detection effective.”
New Research Highlights the Critical Need for AI Governance
Securonix research points to growing investment in AI alongside persistent concerns about governance, trust and human accountability. For its report, The Evolution of Cybersecurity Automation: Towards the AI-Governed SOC, Securonix surveyed 1,000 cybersecurity professionals worldwide during summer 2026.
The findings indicate that cybersecurity teams want automation and AI to advance operational workflows within clearly defined approval boundaries. According to the survey, 96% of respondents said cybersecurity automation is important to their organization, 49% reported using AI in behavioral analytics with human approval, and 99.6% said their organization had increased its budget for AI in cybersecurity automation over the previous year.
AI investment has progressed beyond experimentation. Security teams are looking for AI capabilities that advance operational work within explicit approval boundaries, supported by evidence that can be explained and outcomes that can be defended. The full report and its methodology will be available in November.
Independent Assurance for Governed AI
Securonix has also secured ISO/IEC 42001:2023 certification, the world’s first AI management system standard. The certification applies to the management system governing AI across the Securonix product portfolio, including ThreatQ, and follows an external audit that identified no major findings.
The certification provides independent validation of the company’s approach to accountability, AI risk management and human oversight. It can also support customer due diligence processes involving security, procurement and AI governance reviews. The certificate is available through the Securonix Trust Center.
Availability
Securonix Advanced Behavioral Analytics is available now.
_____
About Securonix
Securonix is transforming security operations with the industry’s first Unified Defense SIEM with Agentic AI, built to decide and act across the threat lifecycle with a human-in-the-loop philosophy. Its cloud-native platform unifies detection, investigation, and response, while enabling Sam, the AI SOC Analyst, and a productivity-based AI operating model for the SOC, so organizations can measure and govern AI by the analyst work it delivers. Helping enterprises become Breach Ready and Board Ready, Securonix delivers accountable, outcome-driven security operations at scale. Recognized as a Leader in the Gartner® Magic Quadrant™ for SIEM and a Customers’ Choice by Gartner Peer Insights™, Securonix delivers trusted security operations for global enterprises. Learn more at www.securonix.com.
Media Contact: Sean Ferguson, Director, Corporate Marketing & Communications, Securonix, sferguson@securonix.com
Join our LinkedIn group Information Security Community!
