Business function

AI use cases for security operations

Threat detection, incident response and vulnerability management.

Use cases
6
Deployments
34
Organizations
31
Outcome disclosed
79%

6 Security operations use cases

31 organizations in 7 countries run these use cases in public. 79% of those 34 deployments disclose a measurable outcome.

Education

AI assisted proctoring and integrity monitoring for remote exams

Exam and assessment integrity AI supports the integrity of a remote, high stakes exam by verifying a test taker's identity and watching for signs of cheating. It analyses behaviour such as typing patterns, facial matching and session activity for signs of impersonation or unauthorized help, and flags sessions for a trained human reviewer to decide, rather than letting a model issue an automated finding of misconduct on its own.

Deployments
3 public, best grade B
Autonomy
Supervised agent
Technology and softwareMedia and entertainment

AI content moderation for trust and safety at online platforms

AI content moderation for trust and safety scans user generated content, such as live video, images, chat and audio, against an online platform's policy in real time. It removes or hides the clearest violations and routes borderline cases to a human moderator with its reasoning attached, so the platform can review far more content than a human team alone while keeping irreversible decisions with a person.

Deployments
3 public, best grade C
Autonomy
Supervised agent
Cross industryHealthcare

AI for security alert triage and investigation in the SOC

Security alert triage and investigation is an AI agent in the security operations centre that picks up each new alert or user reported phishing email. It gathers the evidence from the SIEM, endpoint, identity and threat intelligence tools, gives a verdict with its reasoning and a draft incident summary, and closes clear false positives while an analyst approves every containment action.

Deployments
7 public, best grade B
Median productivity gain
60%
3 deployments
Cross industryTechnology and software

AI for software vulnerability triage and remediation

AI vulnerability remediation is AI that takes security findings from scanners, fuzzers and bug reports and turns the real ones into a drafted code fix for developers. It filters out duplicates and false positives, reproduces and ranks the findings, and drafts a fix with a test for each, which a developer reviews and merges through the normal change process.

Deployments
6 public, best grade B
Reported automation rate
about 70%
AMD, vendor claim
Telecommunications

AI for telecom fraud detection (SIM swap, IRSF and Wangiri)

Telecom fraud detection is AI that protects an operator's network, revenue and numbers from fraud by watching call, messaging, roaming and account activity. It detects SIM swap and port out takeovers, international revenue share fraud (IRSF) and Wangiri one ring scams, blocks or flags them in real time, and shares risk signals with banks and other businesses that rely on the phone number for security. Scam calls aimed at subscribers are handled by call blocking.

Deployments
4 public, best grade B
Reported detection improvement
30%
Vodafone, organization claim
Retail and ecommerceEducation

AI video analytics and screening for physical security

Physical security video analytics is AI that watches camera feeds or walk through sensors at a site and flags a likely weapon, intrusion or theft. It works in real time or on search, and leaves the verification and every response action to a human guard or investigator, rather than acting on its own.

Deployments
11 public, best grade B
Reported search time reduction
at least 90%
Kogan, vendor claim

What the evidence says

Computed from the 34 public deployments behind these use cases. Numbers update with every checked record.

Benchmarks with at least 3 pooled values

Benchmarks across Security operations use cases
KPIMedianReported rangeData pointsClaimed by
Productivity gain60%
60% to 70%
31 organization, 2 vendor
Deployments by stage
  • Announced
    1
  • Production
    22
  • Scaled
    10
  • Paused or rolled back
    1
Public deployments by region
  • North America
    18
  • Global
    6
  • Asia Pacific
    6
  • Europe
    4

Organizations with a public deployment

  • AMD
  • Avanade
  • Cathay Pacific
  • Charlotte-Mecklenburg Schools
  • Chatroulette
  • Chelsea School District
  • Duolingo
  • East Baton Rouge Parish Schools
  • Educational Testing Service (ETS)
  • El Centro Regional Medical Center
  • Federal Housing Finance Agency
  • GAIL's Bakery
  • Google
  • Gwinnett County Public Schools
  • Harry Rosen
  • Human Managed
  • Kogan
  • Labelbox
  • Old Cannery Furniture Warehouse
  • PatientPoint
  • Pearson VUE
  • Plato
  • SEP2
  • St. Luke's University Health Network
  • Tango
  • Telstra
  • Tepper Sports & Entertainment
  • TÜV SÜD
  • U.S. Immigration and Customs Enforcement
  • Utica City School District
  • Vodafone