Swimlane updates security operations center with intelligent routing

Swimlane Inc. expanded its AI security operations center with intelligent routing that automatically directs incoming alerts to deterministic automation, AI-assisted investigation, or agentic automation based on complexity. The company reports one healthcare customer investigating more than 180 threats daily achieved 90% cost savings by reserving agentic AI for the most complex 10% of threats. Co-founder and CEO Cody Cornell said the router prevents replacing an analyst-capacity problem with an AI-spend problem.

Swimlane updates security operations center with intelligent routing Agentic artificial intelligence cybersecurity automation company Swimlane Inc. https://swimlane.com/ today announced the expansion of the company’s AI security operations center https://siliconangle.com/2026/02/18/swimlane-debuts-ai-soc-agentic-backend-tackle-cybersecurity-operations/ to support automatic routing for security investigations. The new capability enables routing of incoming alerts to different paths: deterministic automation, AI-assisted investigation or agentic automation. The company said the front-end triage capability allows the system to quickly assess the complexity of the work and the level of AI involvement needed to assist the alert. Swimlane’s AI-assisted system helps security teams handle cybersecurity-related events and uses its AI to up-level their investigation capability, without defaulting every task to expensive AI models. “As AI consumption continues to rise, the next generation of the SOC will not be able to run every task through AI by default. It will know which work actually needs AI,” explained co-founder and Chief Executive Cody Cornell. Cornell went on to say that at the scale of hundreds of thousands of investigations, $5 to $10 for each investigation piles up quickly. The objective of Swimlane routing each alert to the appropriate model – small or large – for the appropriate level of reasoning is to provide the correct layer of assistance for the security team, without breaking the bank. Of course, if the router sends what looked like a simple alert to deterministic automation but it was actually the tip of the iceberg, the security team can still route it to a higher-reasoning model. This means the team always remains in control and the AI under the hood remains a tool, not a replacement for human ingenuity or judgment. “Customers can expand what their SOC can handle without replacing an analyst-capacity problem with an AI-spend problem,” Cornell said. What the new router does for teams Swimlane said the new router helps prevent everything from getting baked by a high-reasoning AI model. Not every alert requires an expensive agentic AI evaluation. Sometimes it’s just an alert and can go onto the pile, since that’s the nature of false positives, but sometimes it’s part of a trend and should be examined and then surfaced for the team, with the reasoning explained. When that happens, the agent goes into action and the SOC learns what alerts the team wants evaluated. It turns these into repeatable playbooks. This creates a continuous, adaptable and configurable cycle that can be fully automated, keeping the AI budget focused on the complex work while maintaining scale where the investigators do their work. Swimlane said the problem arises because, although AI-driven platforms promise to reduce tedious manual labor and investigation work, they also send what could be done with deterministic scripts to generative AI models. This means an expensive AI model crunches something as simple as a text search or does work that could have been done with a six-line Python script. This is a potential tradeoff of several thousand percent in costs for an outcome where the generative AI could provide a wildly different answer. The company said the vision behind the AI-first SOC was to give security professionals control over the extent of their investigations behind the scenes and manage their tools by having an orchestrator watch incoming alerts and guide them to the appropriate “bucket,” leading to real financial impact. One healthcare customer investigating more than 180 threats a day achieved 90% in cost savings by using intelligent routing. It reserved agentic AI evaluation for only the most complex 10% of threats across investigations. “Swimlane pairs the speed and predictability of automation with AI where reasoning and judgment create real value,” said Cornell. Image: SiliconANGLE/Ideogram A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network , where technology leaders connect, share intelligence and create opportunities. 15M+ viewers of theCUBE videos , powering conversations across AI, cloud, cybersecurity and more 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/ https://siliconangle.com/aws-marketplace/ About SiliconANGLE Media SiliconANGLE https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552 , theCUBE Network https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da , theCUBE Research https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f , CUBE365 https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6 , theCUBE AI https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683 and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.