Elastic launches AlertZero, AI agents for security alert triage

Elastic introduced AlertZero, a team of specialized AI agents built into Elastic Security for alert triage, threat hunting and forensic analysis. Customers set how much of the work runs autonomously, down to individual tasks. It is available as a technical preview on Elastic Cloud and in self-managed and air-gapped deployments.

• Four agent groups called Watches: Triage, Hunt, Detection and Forensics
• Autonomy is adjustable down to individual tasks
• Example: the Hugging Face attack generated over 17,000 events in four days
• Detection rules change only with human approval