Back in September, we unveiled Sumo Logic Dojo AI, our agentic AI platform built to power intelligent security operations and incident response. With that launch, we introduced Mobot, our conversational interface, as well as our first agents designed to help automate routine tasks, streamline investigations, and give security teams the freedom and ability to focus on analyzing the highest value security issues facing their organization.
Today, we’re excited to share the latest additions to Dojo AI. These new capabilities further accelerate investigations, improve platform onboarding and usage, and expand Dojo AI into a flexible ecosystem that grows with your AI strategy.
SOC Analyst Agent: Your always-on security team
Investigations are complex, time-sensitive, and often hindered by an unmanageable volume of alerts. The SOC Analyst Agent applies advanced reasoning to triage alerts, assess severity, and link related activity into a clear picture of what’s happening.
It removes repetitive manual steps so you can:
- Identify impact and blast radius fast
- Prioritize critical threats with confidence
- Achieve more consistent outcomes across teams
By standardizing how alerts are assessed and evidence organized, the SOC Analyst Agent helps security teams focus on real threats and respond faster to reduce MTTR.
Currently in limited beta with select customers; broader availability coming in early 2026.
Knowledge Agent: Help without the wait
Tired of digging through documentation or waiting on support tickets just to find out your request was something simple you could have handled yourself? With Knowledge Agent, simply ask Mobot an onboarding or “how-to” question in natural language, and get a clear, citable answer in seconds.
Knowledge Agent is here to:
- Accelerate user onboarding and time-to-value
- Reduce platform troubleshooting friction
- Increase adoption and confidence across teams
Whether you’re configuring a collector or exploring dashboards, answers are now easily within reach right where the work happens.
Knowledge Agent is available for current Sumo Logic customers today.
Sumo Logic MCP Server: Connecting your AI to the Dojo
Your organization is likely already building its own AI strategy, and Dojo AI is ready to be a part of it. The Sumo Logic Model Context Protocol (MCP) Server is designed to make Dojo AI the hub of your AI ecosystem, connecting Sumo Logic’s agents with your specialized copilots, proprietary models, and third-party AI systems and tools.
With Sumo Logic MCP Server, you can:
- Bring your own AI into workflows securely and at scale
- Run natural-language queries and actions outside the Sumo Logic platform
- Access insights from IDEs and collaboration tools
It’s flexibility with control, blending your best AI with ours.
Sumo Logic MCP Server is in limited beta with select customers; wider availability coming in early 2026.
See Dojo AI in action
We’ll be showcasing these new Dojo AI capabilities live at AWS re:Invent, booth #1329, including hands-on demos.
Not attending re:Invent? Learn more about Dojo AI or schedule a demo.
