Behavior intelligence leader Exabeam has unveiled new AI-driven updates to its New-Scale cloud platform and LogRhythm on-premises SIEM. These enhancements solidify its vision of an agentic security operations center where AI agents perform persistent, autonomous investigations under analyst oversight.

  • Nova AI agent now conducts persistent, cross-incident investigations
  • LogRhythm integrates AI collectors for ChatGPT, Gemini, and Copilot activity
  • New AI tools and marketplaces support analyst workflows and risk scoring

What happened

Exabeam announced a suite of AI enhancements for its New-Scale cloud platform and the LogRhythm SIEM product. The Nova AI agent, introduced in April 2025, has been upgraded to act as a persistent investigator that continuously gathers context, profiles entities, and autonomously pursues secondary searches across incidents. This agent-driven approach supports more comprehensive incident grouping and faster analyst insights.

Parallel updates to LogRhythm focus on integrating AI data sources such as OpenAI’s ChatGPT, Google’s Gemini, and GitHub’s Copilot into on-prem environments through new collectors. LogRhythm also migrated from Elasticsearch to OpenSearch to boost performance and added a self-service reporting engine for AI governance and compliance. Exabeam launched new open-source tools and an Agentic SOC Skill Suite to extend AI workflows and verification capabilities.

Why it matters

These enhancements reflect Exabeam’s strategic shift towards an agentic security operations model, where AI agents handle much of the investigative workload with human analysts maintaining oversight. By automating the ongoing collection and correlation of incident context, organizations can reduce alert fatigue and accelerate time to resolution while preserving critical human judgment in decision-making.

For organizations deploying hybrid security environments, Exabeam’s integration of AI telemetry from leading generative AI platforms into LogRhythm enables threat detection without exposing sensitive data outside the customer's environment. The migration to OpenSearch and improved reporting features also address scalability, audit readiness, and compliance demands in increasingly complex security landscapes.

What to watch next

Exabeam plans to expand its Exabeam Agent Skills Marketplace with additional AI skill packs to enhance analyst workflows and streamline alert triage using natural-language commands. The company's progress in blending cloud-based AI with on-prem security tools will be important to observe, especially as clients adopt hybrid deployments that require seamless AI governance and auditing.

The adoption rate and customer feedback for the persistent investigator model implemented by Nova AI will be key indicators of its practical impact on security operations. Additionally, the effectiveness of Exabeam’s open-source Agentic SOC Skill Suite and verification tools in fostering a broader AI security community could influence wider industry standards for agent-driven SOCs.

Source assisted: This briefing began from a discovered source item from SiliconANGLE. Open the original source.
How SignalDesk reports: feeds and outside sources are used for discovery. Public briefings are edited to add context, buyer relevance and attribution before they are published. Read the standards

Related briefings