r‑tec Director Highlights AI Benefits and Limits in Security Operations Centers

Sebastian Bittig, Director of Cyber Defense at r‑tec (part of the accompio group), explains that artificial intelligence already delivers measurable value in Security Operations Centers (SOCs). AI‑driven machine‑learning models help detect attacks, prioritize alerts and automate routine analysis, easing the overload of up to 50,000 daily alerts that 30‑40 % of which remain unprocessed. The technology also reduces analyst burnout, which 71 % of SOC staff report.

However, Bittig warns that fully autonomous decision‑making remains risky. Current AI solutions act as triage platforms rather than independent responders; they can hallucinate, miss genuine threats and cannot replace human expertise for critical judgments. Marketing promises often exceed real capabilities, and poor SOC processes are not fixed by AI alone. Organizations should scrutinise which functions are truly AI‑based, evaluate concrete benefits, and select providers carefully to avoid disappointment.

The interview stresses that AI’s role is to augment analysts—automating repetitive tasks while keeping humans in control of security‑critical decisions.