AI Agents in the SOC

Attackers aren’t waiting for your team to catch up. They’re already using AI to move at machine speed. Inside your own enterprise, agents are quietly spreading across SaaS apps, copilots, and security tools. Most security teams can’t see them. Fewer still can govern them.

Torq’s Rick Bosworth and Reco’s Todd Wilson sat down for a fireside chat on what it actually takes to operate AI agents securely and offensively inside the SOC. Here’s what they covered:

• Why autonomous triage, investigation, and remediation are no longer optional when threats move at machine speed
• How agent sprawl, shadow AI, and misconfiguration quietly open exploitable gaps across your environment
• How Reco finds every agent in your environment, maps ownership and permissions, and enforces least-privilege before incidents occur
• How Torq AI agents handle the full alert lifecycle from triage through containment, with the transparency and reasoning trails your team needs to actually trust them