{"id":128755,"date":"2026-08-04T05:25:10","date_gmt":"2026-08-04T05:25:10","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/128755\/"},"modified":"2026-08-04T05:25:10","modified_gmt":"2026-08-04T05:25:10","slug":"analysts-got-19-minutes-back-every-hour-in-stellar-cybers-agentic-auto-triage-trials","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/128755\/","title":{"rendered":"Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials"},"content":{"rendered":"

An analyst opening a queue on Monday morning will spend most of it on tickets that amount to nothing. Stellar Cyber\u2019s Agentic Auto Triage<\/a> closed 8,047 of those tickets on its own during customer trials, filing them as confident false positives.<\/p>\n

That covers 64% of every verdict the software issued. Another 1,875 alerts went up the chain as real threats. The remainder got logged as informational and left there.<\/p>\n

The trials ran 124 days inside customer environments. Stellar Cyber<\/a> evaluated 138,475 alerts in that window and traces each published figure back to end-of-trial reports the customers received.<\/p>\n

\"agentic<\/p>\n

19 minutes an hour, and what fills them<\/p>\n

Stellar Cyber measured 19 minutes returned per hour per analyst. Over a week that comes to close to a day.<\/p>\n

Lisa Liu, communications and corporate marketing manager at Stellar Cyber, said junior analysts \u201cwill be able to operate at the level of senior analysts.\u201d She named the hiring squeeze as \u201cthe current bottleneck that the entire industry is feeling with the difficulty of finding appropriate staff to handle both alert volume and deal with the level of threats effectively,\u201d and put the returned hours against it. The job that comes out the other side is one of \u201coversight and proactivity.\u201d<\/p>\n

Every vendor is selling autonomous AI<\/p>\n

Stellar Cyber\u2019s marketing tells buyers to be skeptical of autonomous AI claims, its own included. The company offers trial counts as the answer.<\/p>\n

Liu said: \u201cThe industry is being flooded with noise about AI, and each claim sounds more extreme than the next. But the only way to differentiate between the tools that will prove to actually improve your workflows and supplement your analysts, instead of creating more work for them, are the ones that act symbiotically with your analysts and boost their productivity, instead of unsupervised autonomous agents that could cause more damage than they prevent. The burden of proof of autonomous AI claims should include logic behind the approach to show how the technology works in concert with human analysts, and not an unsubstantiated figure about improved efficiency.\u201d<\/p>\n

The agreement number<\/p>\n

Humans and the agentic bots landed on the same verdict 99.7% of the time. A review step stays in the workflow anyway.<\/p>\n

Liu called that step \u201cthe playbook for the foreseeable future,\u201d citing \u201cthe sheer speed of AI-driven decision-making.\u201d One missed call, she said, \u201ccould compound into a disastrous incident.\u201d Her argument for keeping the step runs on caution: without it, assets \u201cbecome liabilities.\u201d<\/p>\n

The noise starts upstream<\/p>\n

The detection layer feeding the queue generated the alerts that triage then throws away. Triage absorbs that volume at machine speed.<\/p>\n

Liu expects the volume to climb \u201cas enemy agents also develop and acquire more and more sophisticated AI-driven tools to ramp up attacks.\u201d Persistent alert noise, in her words, has always been \u201ca particular pain point for the industry.\u201d Handling the changed volume \u201cwill make the difference between success and failure for your business.\u201d<\/p>\n

How far up the stack machines get to act<\/p>\n

Stellar Cyber\u2019s Multi-Layer AI architecture stacks data transformation at the bottom, detection management above it, and remediation on top. Liu named the principle that governs how high the automation reaches:<\/p>\n

\u201cThe thesis of our technology is full visibility; even at the most automated level, the human analyst still has agency and the ability to intervene or question the machine-made choices. We believe in giving both a breadth of view and a depth of explanation when it comes to automated decision-making. This visibility is what allows human analysts to step up their own capacities and eventually begin to wield their AI tools more effectively. The guiding principle has always been human-augmentation, both in the sense that the human is guiding and overseeing machine-led decisions, and also that the machine is empowering the human to act faster and smarter in every situation.\u201d<\/p>\n

<\/p>\n

If you\u2019re at Black Hat USA 2026, visit Stellar Cyber at booth #5542 to learn more!<\/p>\n","protected":false},"excerpt":{"rendered":"An analyst opening a queue on Monday morning will spend most of it on tickets that amount to…\n","protected":false},"author":2,"featured_media":128756,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[179,7493,40923,61544,313,414,21767,64457],"class_list":["post-128755","post","type-post","status-publish","format-standard","has-post-thumbnail","category-agentic-ai","tag-agentic-ai","tag-agentic-artificial-intelligence","tag-black-hat","tag-black-hat-usa-2026","tag-cybersecurity","tag-security-operations","tag-soc","tag-stellar-cyber"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/128755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=128755"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/128755\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/128756"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=128755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=128755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=128755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}