Netskope Launches AI Agents to Handle Security Alert Overload
Netskope has released AgentSkope, a platform for deploying AI agents that autonomously execute security and network operations workflows. The NASDAQ-listed vendor launched with six agents designed to triage alerts, troubleshoot issues, audit configurations and answer risk queries using natural language.
The timing addresses a concrete operational problem. Research from Software Analyst Cyber Research found that 40 per cent of security alerts go uninvestigated due to lack of capacity. In beta testing, Netskope showed one global professional services firm using its DLP AISecOps Agent to triage 14 million daily security alerts in minutes, converting them into dozens of cases for human review.
What the agents do
Five of the six agents are generally available now. The DLP AISecOps Agent handles data loss protection analysis, applying risk assessment and automated remediation. The Insider Threat AISecOps Agent combines DLP alerts with user behaviour data to identify malicious activity - this one remains in private preview.
The Private Access AIOps Agent audits configuration settings for access controls, removing dormant settings and generating policies based on user consumption patterns. The DEM Data Intelligence Agent transforms digital experience management telemetry into actionable insights through conversational queries. The DEM Insights Agent surfaces incidents and performance bottlenecks across the organisation. The CCI Insights Agent lets analysts query risk attributes and compliance certifications across more than 85,000 cloud, AI and SaaS applications.
Platform approach, not point solutions
Netskope positioned AgentSkope as an architectural foundation rather than standalone tools. The platform maintains consistent security, privacy and governance controls across all agents, tracks agent usage and allows the company to release new agents while managing oversight.
Sanjay Beri, Netskope's co-founder and CEO, said the platform addresses analyst burnout and operational bottlenecks. "Security and network operations teams today are overwhelmed by an endless loop of manual triage, and bogged down by repetitive tasks across disparate tools," Beri said. "AgentSkope acts as an autonomous force multiplier, providing a shared architectural foundation that allows organisations to easily deploy AI agents capable of executing end-to-end workflows."
Industry context
Michael Moore, head of cybersecurity products at Anthropic, said Claude's design fits the work. "Security teams need AI that can triage noise, connect signals across systems, and explain its reasoning to the analyst on the other end," Moore said. Netskope built AgentSkope on Anthropic's Claude model.
Pete Finalle, research manager for security and trust at IDC, described the current approach as unsustainable. "For decades, the answer to new security concerns has been consistent - additional tools, additional features, and additional complexity, which has increased operational noise," Finalle said. "CIOs and CISOs need to invest in agentic security automation as a force multiplier to enhance skilled human resources."
Gartner has predicted that by 2028, cybersecurity AI agents will autonomously manage 25 per cent of incident response workflows for data security events.
Stuart Walters, partner and CIO at BDO UK, acknowledged the firm's data volumes as a driver for adoption. "Our security and access infrastructures are complex, and staffed by busy and experienced teams," Walters said. "Agentic operations that support our security and networking operations teams in handling their growing workflows will be very important for us."
Learn more about AI Agents & Automation or explore the AI Learning Path for Cybersecurity Analysts.
Your membership also unlocks:
