We\u00a0are excited to announce our intent to\u00a0acquire\u00a0WideField Security Inc.\u00a0WideField\u00a0will\u00a0boost the capabilities of\u00a0Splunk\u2019s\u00a0Agentic SOC,\u00a0by extending machine-speed\u00a0autonomous responses\u00a0with identity and session intelligence for human, non-human, and AI-agent activity. To ensure trust, this is\u00a0evidence-backed and policy-aware.<\/p>\n
The rapid deployment of AI agents, autonomous workloads, and non-human identities \u2013 all operating at machine speed \u2013 introduced a new class of security risk.\u00a0Beyond unauthorized access, the challenge\u00a0also\u00a0includes authorized entities taking unsafe actions in the wrong context, which can cause\u00a0significant damage\u00a0before any human team has a chance to respond.\u00a0Enterprises just\u00a0weren\u2019t\u00a0prepared for the security problem that the rise of agentic AI created.<\/p>\n
Addressing this requires\u00a0a\u00a0new approach\u00a0to security\u00a0that\u00a0can detect suspicious behavior even from authenticated\u00a0users and approved AI agents.\u00a0It calls for three interconnected challenges to be tackled:<\/p>\n
Protect agents from the world with clear operational guardrails to ensure agents cannot be manipulated or exploited by bad actors. WideField\u2019s\u00a0identity-centric capabilities\u00a0enforce access controls,\u00a0establish\u00a0session-level guardrails, and maintain trust boundaries as AI agents interact with data, tools, and systems.
\nProtect the world from agents, ensuring that the AI agents\u00a0operating\u00a0within their environments are known, accountable, and restricted to only the access and actions they need to perform their intended tasks.
\nDetect and respond to threats at machine speed and scale, mitigating the operational and security impacts from misaligned or compromised agents.<\/p>\n
Identity,\u00a0in today\u2019s agentic\u00a0AI\u00a0era,\u00a0is not just\u00a0focused on\u00a0who logged in\u00a0but who, or what,\u00a0took action\u00a0and\u00a0under which authority,\u00a0which\u00a0session,\u00a0and with what blast radius.\u00a0Identity\u00a0is now foundational to how organizations govern, secure, and respond\u00a0to\u00a0human\u00a0activity\u00a0and non-human, such as AI agents, service accounts, workloads,\u00a0automation identities,\u00a0etc.\u00a0Detections must translate into evidence-based decisions that help security teams triage faster, investigate with confidence\u00a0and respond safely,\u00a0with human approval where\u00a0required.<\/p>\n
WideField\u00a0turns identity telemetry into\u00a0verified session\u00a0evidence that AI-driven security workflows\u00a0can\u00a0safely\u00a0reason\u00a0over. For\u00a0Agentic\u00a0Security Operations\u00a0that enable autonomous\u00a0responses,\u00a0it is imperative to have\u00a0deterministic data pipelines\u00a0that\u00a0correlate telemetry from endpoints, identity systems, networks, and cloud\u00a0in\u00a0a format optimized for AI consumption.\u00a0WideField\u00a0sessionizes\u00a0identity\u00a0signals,\u00a0which\u00a0provides the\u00a0session-level\u00a0signals necessary for deeper\u00a0analysis\u00a0in Splunk\u2019s Agentic SOC,\u00a0allowing\u00a0the SOC\u00a0agents to infer whether an\u00a0action belongs to a legitimate active session or a potentially malicious one.<\/p>\n
WideField\u2019s capabilities strengthen the Cisco Data Fabric by incorporating deep identity and session intelligence,\u00a0giving customers the context they need to\u00a0operate\u00a0AI safely and at scale. This evidence\u00a0can become a first-class signal for Spunk\u2019s\u00a0Agentic SOC, Cisco Cloud Control, and future AI governance workflows.\u00a0Together with WideField\u00a0we will expand the lens of threat investigation\u00a0and response\u00a0to include these critical factors,\u00a0resulting in\u00a0enhancements to\u00a0Splunk\u2019s Agentic SOC capabilities\u00a0with\u00a0greater\u00a0precision\u00a0and control.<\/p>\n
With the acquisition of\u00a0WideField,\u00a0Cisco\u2019s Splunk business is continuing to invest in developing and delivering differentiated, enterprise-grade agent and agentic security solutions that address the real-world challenges facing today\u2019s organizations. Building on the recent additions of Astrix Security<\/a> and Galileo<\/a>, WideField\u00a0reinforces Cisco\u2019s commitment to delivering an integrated trust layer for the agentic AI era \u2014 one that spans identity, runtime behavior, visibility, and enforcement \u2014 distinguishing Cisco as a trusted partner for enterprises seeking to operationalize AI with confidence and control.<\/p>\n \u00a0<\/p>\n [Forward-Looking Statements] \u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"We\u00a0are excited to announce our intent to\u00a0acquire\u00a0WideField Security Inc.\u00a0WideField\u00a0will\u00a0boost the capabilities of\u00a0Splunk\u2019s\u00a0Agentic SOC,\u00a0by extending machine-speed\u00a0autonomous responses\u00a0with identity and…\n","protected":false},"author":2,"featured_media":78768,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[179,4732,405,7537,10034,18357,21767],"class_list":["post-78767","post","type-post","status-publish","format-standard","has-post-thumbnail","category-agentic-ai","tag-agentic-ai","tag-agentic-ai-security","tag-ai-agents","tag-artificial-intelligence-agents","tag-identity-intelligence","tag-non-human-identity","tag-soc"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/78767","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=78767"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/78767\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/78768"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=78767"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=78767"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=78767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nThis blog post may be deemed to contain forward-looking statements, which are subject to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995, including statements containing the words \u201ctransform\u201d, \u201cwill,\u201d \u201cplans,\u201d \u201cexpects,\u201d \u201cintends,\u201d \u201cmay,\u201d or \u201ccontinues,\u201d or the negative of these terms or other comparable terminology, as well as similar expressions, or regarding the expected benefits to Cisco and its customers from completing the acquisition, and plans regarding\u202fWideField\u00a0personnel. Readers should not place undue reliance on these forward-looking statements, as these statements are\u202fmanagement\u2019s\u00a0beliefs and assumptions, many of which, by their nature, are inherently uncertain, and outside of management\u2019s control. Additionally, readers are cautioned that these forward-looking statements are only predictions and may differ materially from actual future events or results due a variety of factors, including, among other things,\u202fthe potential impact on the business of WideField\u00a0due to the uncertainty about the acquisition, the retention of employees of\u202f WideField and the ability of Cisco to successfully integrate\u202fWideField\u00a0and to achieve expected benefits, business and economic conditions and growth trends, customer markets and various geographic regions, global economic conditions and uncertainties in the geopolitical environment and other risk factors set forth in Cisco\u2019s most recent reports on Form 10-K and Form 10-Q. Any forward-looking statements in this\u202fblog post\u202fare based on limited information currently available to Cisco, which is subject to change, and Cisco will not necessarily update the information.<\/p>\n