Stellar Cyber Enhances Autonomous SOC with Agentic AI in Version 6.3
- Securityish
- Tools & Best Practices
Quick Summary
Stellar Cyber announced the release of version 6.3, enhancing its Autonomous SOC capabilities through agentic AI. This update aims to reduce alert volume and improve response times by automating threat detection and investigation across various environments, including identity and network security. Key features include AI-generated case summaries and advanced phishing triage, which help security teams respond to incidents more efficiently.
The Securityish Brief
Stellar Cyber’s version 6.3 release marks a significant advancement in its Autonomous SOC capabilities, leveraging agentic AI to automate various security functions. This update helps security teams manage the overwhelming number of alerts and fragmented tools they face daily. By automating threat detection, investigation, triage, and response across identity, network, endpoint, email, and cloud environments, the platform aims to enhance operational efficiency.
Key features introduced in this version include AI-generated case summaries, which provide context and evidence for incidents, and advanced automated email phishing triage to identify threats earlier. These enhancements are designed to reduce the mean time to respond (MTTR) and lessen the workload on security analysts.
The integration of the Model Context Protocol (MCP) allows organizations to incorporate third-party agents and bots, facilitating new SecOps use cases and improving workflows. This integration is crucial for organizations looking to unify their security operations and streamline incident response.
Stellar Cyber 6.3 also enhances Identity Threat Detection and Response (ITDR) and Network Detection and Response (NDR) capabilities. By correlating identity, network, and endpoint signals, the platform provides a comprehensive operational view, enabling quicker detection of suspicious behavior.
New integrations with tools such as Wiz, SonicWall Endpoint, and Cisco Duo Trust Monitor expand the platform’s ability to ingest and correlate data, enhancing visibility and detection fidelity. These improvements are essential for organizations aiming to bolster their security posture without overhauling existing systems.
- AI-generated case summaries that automatically explain what happened, why it matters, and what evidence supports the conclusion, reducing investigation time.
- Advanced automated email phishing triage, providing earlier and deeper diagnosis to stop phishing attacks before they escalate.
- Query Manager import/export enables teams and MSSPs to share and reuse proven detection logic.
- A streamlined Watchlist workflow allows analysts to take action directly from investigations, minimizing context switching.
- Enriched login anomaly detections with ASN and user-agent context enhance identity threat detection.
- Support for Netskope CloudTap enables decrypted traffic analysis and user identity enrichment.
- Expanded Unified Threat Management (UTM) support enhances network visibility.
- New Domain Service improves connector scalability and reliability.
Key Takeaways
- Consider implementing Stellar Cyber’s version 6.3 to automate threat detection and reduce analyst workload.
- Utilize AI-generated case summaries to enhance incident response efficiency.
- Integrate third-party agents and bots to streamline security operations.
- Monitor for phishing attacks and utilize automated triage tools to respond quickly.
- Review and enhance your organization’s identity and network security measures to detect suspicious behavior earlier.
Key Terms & Concepts
- Agentic AI: In this article, agentic AI refers to artificial intelligence that autonomously analyzes security signals and automates responses.
- Mean Time to Respond (MTTR): MTTR is the average time taken to respond to and resolve security incidents.
- Identity Threat Detection and Response (ITDR): ITDR involves monitoring and responding to threats targeting user identities within an organization.
- Network Detection and Response (NDR): NDR refers to the process of identifying and responding to threats within a network environment.
- Unified Threat Management (UTM): UTM is a comprehensive security solution that integrates multiple security features into a single platform.
Read the original article here: https://www.helpnetsecurity.com/2026/01/26/stellar-cyber-autonomous-soc-6-3/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
