Swimlane adds custom AI threat detections and two-way MCP to Turbine

Swimlane's October 28 Turbine release adds customer-defined detection logic that routes alerts into its AI SOC, two-way Model Context Protocol support and a Hero AI Application Builder Agent. All capabilities are generally available.

• Detection rules run across parallel compute nodes over tens of thousands of records
• Turbine acts as both an MCP host and an MCP server for Claude, ChatGPT and Copilot
• Hero AI Application Builder Agent generates security apps from natural-language prompts
• The features complement existing SIEM, EDR and cloud security tools