Next-Gen MDR Has To Become An AI-Native SecOps Control Plane

Next-Gen MDR Has To Become An AI-Native SecOps Control Plane

MDR is not going away, but the old model is. The old model was service-first: collect alerts, have analysts investigate them, escalate what matters, and report what happened. That still solves a ...
If AI Becomes the User, What Happens to the SIEM?

If AI Becomes the User, What Happens to the SIEM?

RSAC 2026 made one thing very clear to me: the market is moving fast, but it is still deeply confused. The big announcements from Google, Splunk, and Databricks all point in the ...
SIEM Is Not Dead. It Just Stopped Moving Fast Enough.

SIEM Is Not Dead. It Just Stopped Moving Fast Enough.

I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming ...
The Gaps That Created the New Wave of SIEM and AI SOC Vendors

The Gaps That Created the New Wave of SIEM and AI SOC Vendors

I have been talking to a few AI SOC and new SIEM market entrants over the past few weeks. I have voiced some opinions in previous posts but have now started to ...
How AI Impacts the Cyber Market and The Future of SIEM

How AI Impacts the Cyber Market and The Future of SIEM

Security has always moved in waves. Not because we suddenly get smarter, but because we learn from past mistakes, identify gaps, hit limits, need to protect new technologies, and then go and ...