Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Security Orchestration, Automation and Response.

Charlotte Agentic SOAR: The next evolution of intelligent and adaptive security automation

At Fal.Con 2025, CrowdStrike introduced Agentic SOAR, uniting automation and intelligent agents to deliver the next evolution of fast, adaptive security operations. This innovation sets a new standard for enterprise protection, enabling SOCs to stay ahead of threats and operate with greater confidence and agility. Subscribe and stay updated!

SOAR is Dead. Here's What Replaces It in 2026.

When SOAR emerged around 2015, it was trying to solve a real problem: SOC analysts were drowning in manual, repetitive tasks across disconnected tools. SOAR promised to connect those tools, automate the workflows between them, and give analysts their time back. For a while, it mostly delivered. That era is long dead.

SOAR vs. AI SOC: The Category That Left SOAR Behind

If you’ve been in security operations for more than a few years, you’ve lived through the automation hype cycle at least twice. First, it was SIEM that was going to solve everything. Then SOAR was supposed to fix what SIEM couldn’t. Now, AI SOC platforms are delivering what SOAR always promised but never actually could.

Validate SOAR Workflows Instantly with Fusion SOAR Test Mode

See how CrowdStrike Falcon Fusion SOAR Test Mode lets security teams validate workflows instantly—without live alerts or production risk. You’ll learn how to run playbooks end-to-end using past events or mock data, safely test high-cost actions like LLM analysis, and debug logic with full visibility. With built-in transform testing and mock inputs, Test Mode speeds up automation and reduces errors for faster, safer deployment.

How to Scale SOC Automation with Falcon Fusion SOAR

Most SOC teams don’t struggle with what they need to automate — they struggle with where to start. Between complex playbooks, brittle integrations, and the fear of breaking something in production, security orchestration, automation, and response (SOAR) often feels harder to adopt than it should be.

Data Transformation Agent in Falcon Fusion SOAR

Modern security automation depends on clean, consistent data. The Data Transformation Agent in Falcon Fusion SOAR makes it simple to shape and interpret security data with natural language prompts. Teams can describe how data should be transformed in plain English, automatically generate expressions with full transparency, and reuse transformations across workflows. By embedding data normalization directly into automation, Fusion SOAR reduces complexity and helps teams act on signals faster.

Validate SOAR Workflows Instantly with Fusion SOAR Test Mode

See how CrowdStrike Falcon Fusion SOAR Test Mode lets security teams validate workflows instantly—without live alerts or production risk. You’ll learn how to run playbooks end-to-end using past events or mock data, safely test high-cost actions like LLM analysis, and debug logic with full visibility. With built-in transform testing and mock inputs, Test Mode speeds up automation and reduces errors for faster, safer deployment.

Intelligent workflows: SAP's approach to SOAR in the AI era

Join SAP’s CISO and Tines’ Co-founder for a conversation on how SAP is modernizing its SOAR workflows and building an AI SOC capability with Tines. As SAP scales its global enterprise cloud services, the security team is taking a new approach to workflow automation: combining deterministic playbooks with intelligent, AI-assisted workflows that improve speed, accuracy, and visibility across security operations.

Build SOAR Workflows Instantly with Charlotte AI

With Charlotte AI and Falcon NextGen SIEM, build SOAR workflows instantly from natural language. Create reliable, intelligent automation that helps SOC teams respond at machine speed. CrowdStrike Falcon Next-Gen SIEM: Consolidate security operations with the world’s most complete AI-native SOC platform.

CrowdStrike Leads New Evolution of Security Automation with Charlotte Agentic SOAR

AI has transformed both how attackers operate and how defenders must respond. Today’s adversaries use AI to shift tactics in real time, forcing defenders to react at unprecedented speed. Many SOCs struggle to keep pace due to the limits of legacy automation. Even the most mature playbooks can’t anticipate every scenario or data variation, because playbooks are predictable — but adversaries aren’t.