Security intelligence and management solutions company Exabeam Inc. today unveiled Exabeam Nova, an autonomous artificial intelligence agent.

The company says it delivers actionable intelligence to help security teams respond faster to incidents, reduce investigation times by over 50% and mitigate threats more effectively. Exabeam Nova differs from passive AI assistants that merely retrieve and synthesize data by automatically correlating multiple attack signals.

It actively investigates cases and classifies threats based on real-world behavioral context. Exabeam claims it provides up to an 80% increase in analyst productivity.

“Security teams are done babysitting chatbots that rely on analysts to do the heavy lifting — they need AI that takes action and makes their jobs easier,” said Chief Product Officer Steve Wilson. “As a catalyst for increased operational and organizational impact, Exabeam Nova boosts security operation center productivity, reduces analyst burnout and ensures more efficient and resilient security operations.

Available on Exabeam’s cloud-native New-Scale Security Operations Platform, Nova builds on the foundation of Exabeam Copilot, the company’s existing AI assistant. Unlike other security vendors who have added wrappers over general-purpose chatbots, Exabeam Nova goes beyond reactive data retrieval to automatically generate in-depth analysis of behavioral patterns, attack techniques and anomalous activity with contextualized insights to shorten investigation and response times.

Using Exabeam Nova, the company says, security teams no longer need to piece together fragmented threat signals as Nova does it for them, cutting time spent on alert triage in half. The service also assists by correlating multiple detections within a case and using a proprietary threat classification framework to distinguish between compromised insiders, malicious insiders and undetermined threats with precision. Doing so allows security teams to quickly identify, investigate and respond to threats with greater efficiency and accuracy.

Along with the launch of Nova, Exabeam also unveiled a number of other new features to its New-Scale Platform, LogRhythm SIEM Platform and NetMon network visibility solution. They offer faster investigation, increased visibility and seamless integrations for organizations worldwide.

The new features include enhancements to the New-Scale Platform, such as True Identity. It consolidates multiple asset IDs or usernames into a single entity to streamline investigations and a Custom REST API Collector for easy integration of new data sources. The platform has also gained support for STIX/TAXII through Bring Your Own Threat Intelligence and expanded cloud availability in the U.K. to strengthen the platform’s global reach and detection capabilities.

Additional updates to the self-hosted LogRhythm SIEM Platform include unrestricted dashboards that visualize 80 times more data, improved Microsoft Defender log ingestion and an expanded JSON listener for easier software-as-a-service tool integration. Network visibility service NetMon now delivers deeper network intelligence with support for more than 1,000 new protocols and classification of more than 5,000 applications, helping organizations identify and respond to sophisticated threats such as zero-day attacks and data exfiltration.

Image: SiliconANGLE/Reve