ChannelLife UK - Industry insider news for technology resellers
United Kingdom

Security orchestration, automation and response (SOAR) Stories

UK Stories

Security orchestration, automation and response (SOAR) stories

The state of cyber resilience amongst UK organisations
Data Protection

The state of cyber resilience amongst UK organisations

Despite reported gains, fewer than one in four UK organisations trust their cyber defences to withstand a major incident, a survey found.

By Jason Simper • 5 min read • Last month
BlueVoyant launches AI platform for security operations
Cloud Security

BlueVoyant launches AI platform for security operations

Cyber teams facing mounting alerts may use the new platform to cut false positives and speed containment across Microsoft-heavy environments.

By Joseph Gabriel Lagonsin • 4 min read • Last month
AI changes detection engineering - but only if you fix your context problem
Security Information and Event Management

AI changes detection engineering - but only if you fix your context problem

Missing context could undermine AI-led SOCs, forcing detection engineers to encode business risk and attacker behaviour into every alert.

By Josh Breaker-Rolfe • 5 min read • Last month

Global Stories

Security orchestration, automation and response (SOAR) stories

Dropzone AI signs QBS for exclusive EMEA channel deal
Security Information and Event Management

Dropzone AI signs QBS for exclusive EMEA channel deal

MSSPs across EMEA could cut alert backlogs as QBS Software adds Dropzone AI's autonomous SOC analyst to its partner network.

By Sean Mitchell • 4 min read • This month
Cequence Platform 9.0 adds AI assistant for API security
Data Protection

Cequence Platform 9.0 adds AI assistant for API security

Customers can now query and act on API security data in plain English, but every change still needs human approval before it is applied.

By Sofiah Nichole Salivio • 4 min read • This month
Silent Push 6.0 adds AI workflows and unified cyber platform
Firewalls

Silent Push 6.0 adds AI workflows and unified cyber platform

Security teams can now query Silent Push data through Claude and ChatGPT after the platform added AI access, bulk enrichment and reorganised modules.

By Mark Tarre • 4 min read • Last month
Expel adds agentic AI to Ruxie security operations
Digital Transformation

Expel adds agentic AI to Ruxie security operations

Security teams may cut alert backlogs and speed containment as Expel rolls out agentic AI across its Ruxie managed detection service.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Klue breach lets attackers steal Salesforce CRM data
Customer Relationship Management

Klue breach lets attackers steal Salesforce CRM data

Trusted third-party access has let attackers quietly pull large volumes of Salesforce records from enterprise systems via a Klue integration.

By Sean Mitchell • 4 min read • Last month
GitGuardian launches endpoint protection for laptops
Endpoint Protection

GitGuardian launches endpoint protection for laptops

A single compromised laptop can expose thousands of live keys, according to GitGuardian's early field tests, as attacks shift to developer machines.

By Sofiah Nichole Salivio • 4 min read • Last month
Reco launches Claude security integration for enterprises
Data Protection

Reco launches Claude security integration for enterprises

Security teams can now trace AI activity across employee and developer environments as Reco links Claude usage to permissions, keys and data paths.

By Mark Tarre • 4 min read • Last month
What makes a cybersecurity AI partnership worth paying attention to?
Cloud Security

What makes a cybersecurity AI partnership worth paying attention to?

Tenable's move with Anthropic could help security teams cut vulnerability backlogs, speeding remediation before attackers exploit exposed systems.

By Kirsten Doyle • 6 min read • Last month
CrowdStrike named Forrester XDR leader on AI strength
Cloud Security

CrowdStrike named Forrester XDR leader on AI strength

The accolade underscores CrowdStrike's push to tie AI, endpoint and identity tools into a single security platform as rivals race to widen coverage.

By Sean Mitchell • 3 min read • Last month
Grant Thornton Advisors standardises on CrowdStrike Falcon
Digital Transformation

Grant Thornton Advisors standardises on CrowdStrike Falcon

Clients will get a single security operating model as Grant Thornton Advisors replaces fragmented MDR tools with CrowdStrike Falcon across its global services.

By Sean Mitchell • 4 min read • Last month
Fortinet launches FortiSOC cloud security platform
Software-as-a-Service

Fortinet launches FortiSOC cloud security platform

The new service aims to help security teams cut alert overload and tool sprawl as firms seek faster response from one cloud platform.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Fortinet launches FortiSOC cloud security platform
Security Information and Event Management

Fortinet launches FortiSOC cloud security platform

The cloud service aims to cut alert overload and tool sprawl for security teams under pressure to investigate and respond faster.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

Security orchestration, automation and response (SOAR) stories

Intezer launches MCP server for security AI agents
Security Information and Event Management

Intezer launches MCP server for security AI agents

The new server lets security teams feed Claude and Codex with case history and triage logic, reducing manual alert handling.

By Joseph Gabriel Lagonsin • 4 min read • Last month
ManageEngine adds real-time telemetry & SOAR to tools
Security Information and Event Management

ManageEngine adds real-time telemetry & SOAR to tools

Real-time network monitoring and automated security response are meant to help teams spot brief outages faster and cut handoffs between tools.

By Sean Mitchell • 4 min read • Last month