Zscaler launched Agentic SOC on September 9 as a new security-operations product built around specialized AI agents. The platform combines Zscaler telemetry with third-party security data and is designed to correlate alerts, investigate incidents and recommend or automate response actions.
The product uses a context graph to connect network, identity, endpoint, cloud and exposure information. Zscaler says its agents cover functions including triage, enrichment, investigation, verdict assignment and response planning, with native Zero Trust Exchange controls available for containment actions.
Zscaler also says it is using models from Anthropic and OpenAI alongside its own threat intelligence. Help Net Security independently corroborated the launch and the core product architecture. Claims about speed, accuracy or reductions in analyst workload remain vendor claims unless independently measured.
For AiToolMap, the launch matters because Agentic SOC is a distinct operational product surface rather than a generic AI feature inside an existing dashboard. It packages agent-driven investigation and response around Zscaler’s existing telemetry and enforcement stack, while still allowing human review for higher-impact actions.