The Newsroom

As Clawson observed, AI data influx challenges legacy SIEMs. “The number of data sources is likely to exponentially increase in the age of artificial intelligence (AI) which suggests that many legacy SIEM platforms will not be able to keep pace.”

Security leaders are seeing the benefits of AI in security operations, but not at the scale vendors claim, according to a new study by Sumo Logic.

A survey of 506 cybersecurity leaders and practitioners working for organizations with more than 500 employees, published today, finds that while 80% report security and DevOps teams are using shared observability tools, less than half (45%) say the two teams are very aligned on tooling and workflows compared to 43% that said these teams are somewhat aligned.

These strategic apps provide customers with robust visibility into their data pipelines, dependable security analytics, and faster troubleshooting across two of the industry’s leading cloud data platforms.

The new apps expand Sumo Logic’s coverage for Databricks and Snowflake platforms to help teams detect anomalies, investigate incidents and monitor and optimize operations.

Attackers are using the latest in AI automation, while defenders remain stuck patching the past and just trying to keep up.

Clawson detailed how Sumo Logic’s Dojo AI and emerging agentic framework are enabling customers to operationalize intelligent agents responsibly—with trust, visibility, and control—while preparing for a future where agent-to-agent interaction becomes the default architecture for digital systems.

Sumo Logic has announced major advancements to Dojo AI, its agentic AI platform for security operations, introducing the SOC Analyst Agent (beta), Knowledge Agent, and Model Context Protocol (MCP) Server.

AWS said organizations like Cisco, Siemens, Sumo Logic, and Trellix are already using Nova 2 models for applications ranging from agentic threat detection to video understanding and voice AI assistants.

By providing tools that automate and accelerate investigation processes, Sumo Logic aims to help organizations focus on critical threats. The ability to integrate third-party AI models also suggests a move towards more flexible and customizable security solutions.

The challenge, of course, then becomes determining the best way to orchestrate what will soon be a small army of IT and security agents that are being assigned individual tasks to complete, an issue that will be easier to resolve if they all share access to an MCP server that Sumo Logic plans to make generally available in 2026, notes Chas Clawson.

The new releases today include the SOC Analyst Agent, Knowledge Agent and a Model Context Protocol server that help security teams reduce alert fatigue, accelerate investigations and streamline security workflows.