Zscaler launches AI-first Agentic SOC to stop AI-driven threats at machine speed

Zscaler Redefines Security Operations with AI-First Approach

Zscaler announced Zscaler Agentic SOC, an AI-first security operations center designed to proactively reduce exposures, scale human expertise, and stop AI-driven attacks at machine speed1

1

2

2

. Rather than layering AI capabilities onto existing security stacks, Zscaler built this solution from the ground up with an AI-first security operations philosophy. The platform addresses a critical challenge: AI-driven threats now move faster than SOC teams can manually correlate, analyze, and remediate. Threatlabz, Zscaler's global research team, reports a rise in evasive tactics, including the use of trusted sites to host attacks, abuse of legitimate remote management tools, and browser-based attacks1

1

2

2

.

Partnerships with Anthropic and OpenAI Power Advanced Detection

To power Agentic SOC, Zscaler partnered with leading frontier AI labs, including Anthropic and OpenAI1

1

2

2

. By integrating their frontier models alongside Zscaler's proprietary threat intelligence and Zero Trust telemetry, the platform delivers AI agents that reason with greater depth, accuracy, and explainability than any single model could achieve alone3

3

. This collaboration extends beyond threat detection, with Zscaler's open platform approach enabling direct integration with frontier models. Security teams can ingest vulnerability findings and operationalize them within their SOC workflows, reflecting Zscaler's commitment to building on the best available AI with the speed, reliability, and transparency that security operations demand1

1

.

Unmatched Zero Trust Telemetry Drives Real-Time Detection

Zscaler sits inline, capturing network, identity, endpoint, cloud, and AI insights across its 750 billion daily Zero Trust transactions that security teams can operationalize for real-time detection and response2

2

3

3

. This massive data stream combines with the world's largest decoy mesh network, expert-validated agents, integrated Zscaler Zero Trust controls, and customers' third-party controls to detect, investigate, and respond to threats earlier and automate containment at machine speed1

1

. The platform unifies exposure management with threat defense in a single system, connecting proactive attack surface reduction with reactive threat defense to enrich context and accelerate protection2

2

.

Specialized AI Agents Built on Frontline Experience

Zscaler AI agents have been trained and continuously tuned on more than 10 years of frontline SOC, managed detection and response, and threat-hunting experience, informed by threat intelligence derived from thousands of customer environments globally2

2

3

3

. These specialized AI agents perform dedicated roles across triage, root-cause investigation, assigning verdicts, and triggering response workflows, reducing analyst workload and accelerating defenses3

3

. According to Deepen Desai, Executive Vice President of Cybersecurity at Zscaler, "Agentic SOC is a fundamental rethinking of security operations, built with agentic capabilities at its core to reduce exposures proactively, extend human expertise with AI agents and contain threats at machine speed"1

1

2

2

.

Closed-Loop Remediation and Automated Threat Containment

Zscaler automatically contains cyber threats at machine speed with native inline controls that can isolate compromised users, block command-and-control communications, and cut off lateral movement2

2

3

3

. This closed-loop remediation capability provides automated threat containment without requiring manual intervention. Integrations with customers' third-party tooling provide increased options for nuanced responses to active threats2

2

. The platform seamlessly integrates with existing security ecosystems, pulling in third-party data to contextualize risks and threats while triggering automated outbound actions to proactively eliminate exposures1

1

3

3

.

Industry Experts Validate the Shift to AI-First Defense

Allie Mellen, principal analyst and author of Code War: How Nations Hack, Spy, and Shape the Digital Battlefield, emphasized the urgency: "The past year has made one thing clear: AI attacks are fundamentally changing the threat landscape, operating at a speed, scale, and level of adaptability that looks very different from traditional human-led activity. To defend effectively, organizations must double down on the fundamentals Zero Trust principles, preventing data exfiltration, limiting access, and making AI attacks as expensive as possible"1

1

2

2

. Andrea Liccardi, Sr. Cybersecurity Manager at Maire Tecnimont, shared real-world impact: "Our team was drowning in alert noise, forcing top analysts into triage instead of proactive threat hunting. Zscaler Agentic SOC gives us full attack-path context using telemetry we already had in place, helping our team move from fragmented signals to faster, more informed decisions"1

1

2

2

. Watch for how this platform performs against increasingly sophisticated AI-driven threats and whether other security vendors adopt similar AI-first approaches to stop AI-driven attacks.