<\/p>\n
In alert triage, AI agents are reducing alert fatigue by clustering alert patterns and enabling risk-based prioritization, adds Dipto Chakravarty, chief product and technology officer at Black Duck. Organizations are already seeing efficiency gains of roughly 40-50% for lower-tier SOC tasks, freeing human analysts to focus on more advanced investigations and response activities, Sordilla says. Analyst firm Gartner expects that by 2028, 50% of threat detection, investigation, and response (TDIR) platforms \u2014 including technologies such as EDR, XDR, SIEM, and SOAR \u2014 will incorporate agentic AI capabilities, up from less than 10% in 2024. Unlike static signature databases, AI models can continuously learn from new data, including newly identified threats, evolving attack techniques, and changes in an organization\u2019s normal operational patterns. One of the primary advantages is AI\u2019s ability to analyze large amounts of data quickly and accurately.<\/p>\n<\/p>\n