Business function

AI use cases for security operations

Threat detection, incident response and vulnerability management.

Use cases: 3
Deployments: 15
Organizations: 12
Outcome disclosed: 73%

3 Security operations use cases

12 organizations in 5 countries run these use cases in public. 73% of those 15 deployments disclose a measurable outcome.

Cross industryHealthcare

AI for security alert triage and investigation in the SOC

An AI agent in the security operations centre that picks up each new alert or user reported phishing email, gathers the evidence from the SIEM, endpoint, identity and threat intelligence tools, gives a verdict with its reasoning and a draft incident summary, and closes clear false positives while an analyst approves every containment action.

Deployments

7 public, best grade B

Median productivity gain

60%

3 deployments

Cross industryTechnology and software

AI for software vulnerability triage and remediation

AI that takes security findings from scanners, fuzzers and bug reports, filters out duplicates and false positives, reproduces and ranks the real ones, and drafts a code fix with a test for each, which a developer reviews and merges through the normal change process.

Deployments

4 public, best grade B

Autonomy

Copilot

Telecommunications

AI for telecom fraud detection (SIM swap, IRSF and Wangiri)

AI that protects the operator's own network, revenue and numbers from fraud: it watches call, messaging, roaming and account activity to detect SIM swap and port out takeovers, international revenue share fraud (IRSF) and Wangiri one ring scams, blocks or flags them in real time, and shares risk signals with banks and other businesses that rely on the phone number for security. Scam calls aimed at subscribers are handled by call blocking.

Deployments

4 public, best grade B

Reported detection improvement

30%

Vodafone, organization claim

What the evidence says

Computed from the 15 public deployments behind these use cases. Numbers update with every checked record.

Benchmarks with at least 3 pooled values

Benchmarks across Security operations use cases
KPI	Median	Reported range	Data points	Claimed by
Productivity gain	60%	60% to 70%	3	1 organization, 2 vendor

Industries these use cases also serve

AI patterns used

Deployments by stage

Announced
1
Production
12
Scaled
2

Public deployments by region

North America
5
Asia Pacific
4
Global
3
Europe
3

Organizations with a public deployment

Avanade, Federal Housing Finance Agency, Google, Human Managed, Labelbox, PatientPoint, SEP2, St. Luke's University Health Network, Telstra, TÜV SÜD, U.S. Immigration and Customs Enforcement, Vodafone.

Explore the library

All AI use cases

Search and filter the whole library.

State of AI Use Cases

Aggregate findings across every record.

KPI benchmarks

Definitions and reported values per KPI.

Methodology

How every record is verified and graded.