Photo: Tima Miroshnichenko / Pexels
The behavior detection engine watches sequences of agent actions, aiming to give security teams a shared language for spotting AI agents gone wrong
Cisco Systems Inc. and its peers #
| Company | Price | Market cap | P/E (trailing) | Forward P/E | Annual revenue (USD) | Annual revenue growth | Annual net income (USD) | Operating margin |
|---|---|---|---|---|---|---|---|---|
| Cisco Systems Inc. CSCO · Price dated Oct 27, 2026 · tokenized CSCOx | $111 | $439.1B | 33.4 | Unavailable | $63.3BFY ended 2026-07-25 · 10-K | +11.8%FY ended 2026-07-25 vs 2025-07-26 · 10-K | 13,267,000,000FY ended 2026-07-25, attributable to the company · 10-K | 24.3%FY ended 2026-07-25 |
| Arista Networks Inc. ANET · Price dated Oct 27, 2026 | $187 | $235.8B | 59.2 | Unavailable | $9.0BFY ended 2025-12-31 · 10-K | +28.6%FY ended 2025-12-31 vs 2024-12-31 · 10-K | 3,511,400,000FY ended 2025-12-31, attributable to the company · 10-K | 42.8%FY ended 2025-12-31 |
| Palo Alto Networks Inc. PANW · Price dated Oct 27, 2026 · tokenized PANWx | $402 | $328.6B | 1,004.3 | Unavailable | $11.5BFY ended 2026-07-31 · 10-K | +24.5%FY ended 2026-07-31 vs 2025-07-31 · 10-K | 307,000,000FY ended 2026-07-31, attributable to the company · 10-K | 6.1%FY ended 2026-07-31 |
| Dell Technologies Inc. DELL · Price dated Oct 27, 2026 | $502 | $321.3B | 29.2 | Unavailable | $113.5BFY ended 2026-01-30 · 10-K | +18.8%FY ended 2026-01-30 vs 2025-01-31 · 10-K | 5,936,000,000FY ended 2026-01-30, attributable to the company · 10-K | 7.2%FY ended 2026-01-30 |
Missing figures stay unavailable. Forward P/E requires a dated source. Annual revenue, revenue growth, net income and margin come from each company's own 10-K, in US dollars, and each row shows that fiscal year. Revenue growth compares the fiscal year with the prior year stated in the same 10-K. Net income is the full year amount attributable to the company, or available to common stockholders where the filing states only that, or consolidated net income. Each row names its basis. Trailing P/E reads "Not meaningful" when the dated trailing diluted EPS is a loss or zero. An operating margin appears only when the filing states both the operating income and the revenue for the same year.
Sources: SEC filings, Gloria daily closes and CoinGecko. Oldest record refresh: Oct 27, 2026, 8:43 PM EDT. Refresh is not a price or filing date. Each row shows its price date and its annual fiscal period. Peers use industry code and company size, or editorial selection. Market cap multiplies that row price by the company share total the latest SEC filing states for every share class together. Trailing P/E divides it by trailing diluted earnings from SEC filings. Rolled earnings per share are approximate because share counts can change between periods. Both appear only when the SEC data carries its date, so they are estimates at one price date, not synchronized filing valuations. Not investment advice.
Cisco has released Project Quarry as open source. It is a behavior detection engine built to keep watch over AI agents and catch the ones that start misbehaving.
Cisco is framing Quarry around a specific worry: rogue agents that go off the rails, as they did in the Hugging Face hack. Or, in the company’s framing, something worse.
What Project Quarry actually does #
Most existing detection tools zero in on a single moment. They examine one specific interaction with an AI model or agent and judge whether it looks dangerous.
Quarry takes a different route. It analyzes sequences of actions rather than isolated events, looking for risky behavior that only becomes visible over time.
An agent might take a series of steps that each look harmless on their own. Strung together, those same steps could add up to data leaking out or permissions being abused.
Cisco says the goal is a “shared language” for evaluating how agents behave. Instead of every vendor and security team writing its own private definitions of suspicious activity, Quarry aims to give everyone a common vocabulary.
The Snort and YARA playbook #
Cisco is explicitly modeling Quarry on two well-known security projects. The first is Snort, which Cisco also maintains, and which became a standard way to detect malicious network traffic.
AI, tech, and the markets they move—in one daily briefing.
Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
The second is YARA, which did something similar for rule-based malware identification. Both projects succeeded partly because they gave defenders a common format for describing threats.
If Quarry catches on, a detection rule written by one team to flag a dangerous agent behavior could be reused by others. That is the network effect Snort and YARA built, and Cisco clearly wants a sequel.
Part of a broader Cisco push #
Quarry does not arrive alone. Cisco has rolled out several open-source security tools for AI agents under its AI Defense initiative across late 2025 and 2026.
That lineup includes the A2A Scanner, DefenseClaw, MCP Scanner and Skill Scanner. Each is aimed at improving how organizations detect problems in, and govern, autonomous AI operations.
The tools share a common thread. They rely on behavioral analysis techniques, including heuristics and static and dynamic inspection, focusing on patterns of behavior, mismatches in intent, and how agents communicate.
The Hugging Face incident served as a catalyst for Cisco’s attention to rogue agent risk.
Why this matters for security teams #
The core problem Quarry addresses is visibility. Organizations are handing AI agents access to systems, data and tools, and those agents can take actions without a human approving every step.
For security teams, an open-source engine has practical appeal. They can inspect how it works, adapt it to their own environments, and contribute rules back. Disclosure: This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our Editorial Policy.