IBM delivers autonomous security operations with agentic AI

IBM unveiled new agentic artificial intelligene (AI) and automation capabilities in its managed detection and response service offerings to help enable autonomous security operations and predictive threat intelligence.

IBM is launching Autonomous Threat Operations Machine (ATOM), an agentic AI system that provides autonomous threat triage, investigation and remediation with minimal human intervention.

IBM is also introducing the new X-Force Predictive Threat Intelligence (PTI) agent for ATOM, which leverages industry vertical-specific AI foundation models to generate predictive threat insights on potential adversarial activity and minimize manual threat hunting efforts.

The announcement came during the RSA 2025 Conference in San Francisco.

Unlocking new value from security operations with automation

ATOM’s agentic AI framework and orchestration engine leverages multiple individual agents to augment an organization’s existing security analytics solution, according to a press release. This helps accelerate threat detection, analyze alerts with enrichment and contextualization, perform risk analysis, create and execute investigation plans and perform remediation actions which enhance the security analyst experience.

This orchestration allows security teams to focus on high priority threats, rather than spending valuable time on false positives or lower-priority risks.

“Organizations continue to be challenged by increasingly stealthy and persistent cyber threats, which are slowing detection and response times,” said Mark Hughes, global managing partner for cybersecurity services at IBM. “By delivering agentic AI capabilities, IBM is automating threat hunting to help improve detection and response processes so clients can unlock new value from security operations and free up already scarce security resources.”

AI curates proactive threat intelligence

IBM X-Force PTI integrates AI with expert human analysis to help curate proactive threat intelligence, IBM stated. Built on proprietary AI foundational models and trained on cybersecurity data, PTI provides a tailored, contextualized threat intelligence feed and predicts potential threats based on adversary behavior.

To extract early indicators of behavior and compromise, PTI gathers data from more than 100 sources including X-Force Threat Intelligence, open-source RSS feeds, APIs and other automated sources, as well as user-supplied organizational context.

PTI synthesizes that information into collective intelligence reports that include recommended threat hunt queries tailored to the organization’s specific needs. By focusing on indicators of behaviors, instead of just indicators of compromise, businesses can get ahead of threats, IBM said.

IBM was recently named a Leader in Gartner’s 2025 Magic Quadrant for Process Mining Platforms.

All Access: AI in PEX is 2025

All Access: AI in PEX 2025 is designed to address these challenges and empower organizations to successfully integrate AI into their process improvement initiatives. The content series will bring together industry experts, thought leaders, and practitioners to share insights, best practices, and real-world case studies.

Register Now