By Stephanie Simone
Swimlane, a leader in agentic AI automation for every security function, is expanding Swimlane AI SOCwith intelligent automation routing to support end-to-end agentic investigations.
According to Swimlane, the new capability evaluates each incoming alert and directs it to one of three execution paths: deterministic automation, AI-assisted investigation, or fully agentic investigation.
“By matching the level of AI involvement to the work required, Swimlane helps security teams increase investigation capacity without defaulting every task to a costly AI model,” the company said.
Swimlane offers a different approach: intelligent routing decides, alert by alert, whether the job needs automation, AI assistance, or a fully agentic investigation, and sends it down that path automatically. Additionally, Swimlane’s AI SOC capability supports model selection to optimize AI costs and allows customers to bring their own model (BYOM).
“As AIconsumption continues to rise, the next generation of the SOC will not be able to run every task through AI by default. It will know which work actually needs AI,” said Cody Cornell, co-founder and CEO of Swimlane. “When you’re processing hundreds of thousands of investigations, spending five or ten dollars in tokens for each investigation doesn’t scale. Swimlane pairs the speed and predictability of automation with AI where reasoning and judgment create real value, so customers can expand what their SOC can handle without replacing an analyst-capacity problem with an AI-spend problem.”
WithSwimlane AI SOC, security teams stop paying AI prices for work automation already does well, sending well-understood alert types straight to automation for maximum speed, scale and predictability at a fraction of the cost of AI tokens, the company said.
Over time, repeated investigations get validated and codified into known automation paths. The system becomes more scalable and more efficient as it learns from the work it has already done.
TheSwimlane Turbinerelease also expands how security practitioners build and manage automation throughHero AI, helping teams increase development capacity without requiring specialized platform expertise.
“Turbine is evolving from a platform security teams build on to a platform they can simply ask,” said Srikant Vissamsetti, chief operating officer at Swimlane. “Hero AI removes technical barriers across the platform, while intelligent routing ensures customers use AI with purpose. Together, these capabilities help security teams build faster, investigate more and maintain control over how AI is applied.”
These capabilities are generally available now as part of the current Turbine release. Hero AI must be enabled in a customer’s tenant to access the widget-building and model-selection features.
For more information about this news, visit https://swimlane.com.