As AI shrinks threat response times to seconds, the security operations center is evolving toward the agentic SOC model-combining autonomous machine-speed investigation with human oversight.
CrowdStrike Holdings Inc. and IBM Corp. are deepening their partnership to integrate CrowdStrike’s Charlotte AI with IBM’s Autonomous Threat Operations Machine (ATOM). This move aims to enable coordinated, rapid threat containment at scale.
Daniel Bernard, CrowdStrike’s chief business officer, emphasized the shift toward autonomous SOCs ready for the future. "We’re remapping SOCs of today to something autonomous and ready for tomorrow," he said.
IBM’s Mark Hughes noted that traditional analyst roles are being replaced by digital workers. "Layer 1 and Layer 2 analysts are now overtaken by digital twins," he explained.
The integration underscores a broader trend: enterprises are moving past simple automation to fully reimagined workflows powered by foundational AI tools.
Both executives spoke at the RSAC 2026 Conference, highlighting the critical need for visibility, governance, and fail-safe controls in AI-driven security ecosystems.