Cisco goes all in on agentic AI security

Cisco goes all in on agentic AI security

By Michael Cooney
Publication Date: 2026-03-23 21:37:00

Other new ES features include:

  • Detection Studio: A unified workspace for detection engineers to plan, develop, test, deploy, and monitor detections. By mapping coverage against the MITRE ATT&CK framework, teams can identify data gaps and validate detection quality in real time. Another new instrument, Malware Threat Reversing Agent, gives customers insight into malware threats, providing summaries and step-by-step breakdowns of malicious scripts.
  • Federated Search: Lets SecOps teams gain comprehensive visibility across distributed data sources, according to Cisco.
  • Exposure Analytics: Automatically discovers assets and users across the environment. By leveraging data already being ingested, it provides a “Security Truth Layer” without the need for additional agents or tools, Cisco stated.

Cisco DefenseClaw

Cisco is also releasing an open-source secure agent framework called DefenseClaw that lets users define policy-based security, network, and privacy…