Behavior intelligence company Exabeam Inc. today introduced a batch of new artificial intelligence features that push its cloud-based New-Scale platform further into agent-driven investigations.

The company’s on-premises LogRhythm security information and event management platform is also getting an AI-focused update.

The updates are part of Exabeam’s move toward what it calls the agentic security operations center, where AI agents take on much of the investigative legwork under an analyst’s supervision. Steve Wilson, Exabeam’s chief AI and product officer, said the future SOC will be defined “by how effectively people and AI agents work together.”

On the cloud side, Nova AI, the agent Exabeam first introduced in April 2025, takes on a wider role. Nova now acts as a persistent investigator across the whole platform. As an incident unfolds, the agent collects context and entity profiles and runs its own secondary searches. Related Cases, released in early access in July, groups connected incidents automatically so analysts see the wider picture sooner.

Nova AI customers include Mexican payment processor E-Global. Eduardo Sulvarán Velázquez, subdirector of cyber risk management at the company, said the agent has helped analysts there prioritize cases. AI can speed up investigations “without removing human judgment from the process,” he added.

Two other cloud additions center on Anthropic PBC’s Claude. A new Guided Investigation Skills Pack for Claude brings Exabeam’s investigation workflows into command-line AI agents, where analysts can triage alerts and run investigations using natural-language commands. Exabeam plans a series of skills for the Exabeam Agent Skills Marketplace, starting with this pack.

Claude Enterprise customers also get a deeper integration. Prompts, tool calls and actions from those deployments now land on a single timeline. Exabeam runs event-time analysis and behavior-based correlation over that record to catch rogue agents and behavioral drift.

The rest of the cloud release covers reporting. Executive Digest packages security metrics in a form meant for the boardroom. A separate addition, Outcomes Navigator Overrides, lets teams tailor risk scoring, with compliance metrics broken out for each business unit.

The LogRhythm update is aimed at organizations that keep infrastructure, data or AI workloads on-premises. New out-of-the-box collectors feed activity from OpenAI Group PBC’s ChatGPT, Google LLC’s Gemini and GitHub Inc.’s Copilot into LogRhythm Intelligence Analytics. Sensitive data stays inside the customer’s environment when teams query and triage it through a new community Model Context Protocol server that works with local generative AI models.

Under the hood, LogRhythm has moved from Elasticsearch to OpenSearch through an in-place migration that Exabeam said improves speed and scale. That base also supports a new self-service reporting engine with AI governance and audit-ready compliance reports.

Today’s release also carries new open-source tools, published through the Open Agent and AI Security Community that Exabeam founded. The main addition is an Agentic SOC Skill Suite, which brings New-Scale skills to Claude Code and OpenAI’s Codex. One community marketplace now handles plugins for both, installed with a single command. Praxen, the agent verification tool Exabeam open-sourced in June, picks up new Thinking Modes and evidence-committed scoring that ties each finding and score more directly to its source material.

Image: Exabeam