Proofpoint launches AI SOC Analyst Agent powered by OpenAI

Proofpoint has announced the launch of its SOC Analyst Agent, an agentic AI capability designed to assist security teams in investigating threats and automating recurring analysis. The tool utilizes OpenAI Daybreak models to connect security signals across various Proofpoint products, aiming to reduce the manual workload associated with Security Operations Center (SOC) investigations.

The agent allows analysts to use natural language to investigate security events, synthesize findings, and plan investigations without needing to switch between multiple consoles or write individual queries. It draws context from connected data, including logs, alerts, data loss prevention (DLP) events, and user risk signals. While the AI provides structured findings and recommended next steps, Proofpoint emphasizes that consequential remediation decisions remain in human hands.

Currently in private preview, the SOC Analyst Agent is expected to reach general availability by the end of Q3 2026. The initiative addresses the prioritization challenges faced by security teams, where 54% of organizations already use AI-enhanced capabilities to triage alerts but still struggle to connect fragmented signals across disparate systems.