Pondurance Launches Kanati™ Agentic AI SOC

Pondurance is proud to announce the launch of the industry’s first Agentic SOC designed for autonomous operations within a managed detection and response (MDR) service. Kanati replaces alert-driven, error-prone workflows with a coordinated system of AI agents that operate continuously throughout the full threat lifecycle. 

Doug Howard, Ponderance CEO notes that “cyber adversaries operate at machine speed, using AI with no rules of use. Security operations must match that pace or fall behind, while protecting and not negatively impacting each customer’s environment. Our new Kanati Agentic AI SOC reimagines from the ground up how the SOC operates in the next-generation MDR, fusing 25TM of daily event, alert, and threat intelligence data with contextual AI to achieve containment for high-confidence threats.”

With Kanati, our customers will receive lightning fast threat analysis, a dramatic reduction in false positives, and sub-second containment for high-confidence threats. Initial performance measurements of Kanati demonstrate:

• 90% faster threat analysis with AI-powered confidence rating and containment

• < 2 minute average investigation time of all alerts, regardless of priority

• 80% reduction in false positive tickets

• 10x improvement in contextual enrichment and correlation of threats

• 100% coverage of alerts resulting in all alerts investigated with full analytical rigor

Agentic AI is an absolutely ideal application for security operations where threats move at machine-speed, where fast, accurate detection, analysis and containment can make the difference between a minor inconvenience and a successful ransomware attack or data breach.

Why the Name Kanati?

Kanati was designed to ingest and analyze the over 60 terabytes of telemetry data at peak that Pondurance sees every day in real-time. This means that new threat activity can be identified quickly and correlated with thousands of other events - both real-time and historical. This allows the entire SOC (Agentic and human-driven) to see more enriched and detailed information on every alert that is created. False positives are quickly identified; true positives are either instantly acted on autonomously (in cases of high-confidence alerts) or brought to the attention of our SOC Analysts where human judgment can be applied. 

In the mythology of the Cherokee people, Kanati (kah-nah-TEE) is the Master of the Hunt. He is described as a careful and responsible hunter who controls game animals to avoid overhunting and works with humans to define and preserve the spirit of the hunt itself.  Pondurance Kanati was named as an homage to him, as the name also describes the nature and ethos of Pondurance Kanati incredibly well.  The Agentic AI is careful and responsible as it hunts for threats, ensuring that these alerts are properly handled either on its own or in collaboration with human SOC Analysts – or both. 

With this model our SOC can operate at optimal efficiency. With the Agentic AI doing what AI can do best -- evaluating and analyzing large amounts of information round-the-clock to draw rigorous, informed conclusions, then taking remediation actions that can be executed at machine-speed for high-confidence events. Working with human SOC Analysts who provide oversight, judgment, and intuition for situations with greater ambiguity. 

Is Kanati be Safe to Use?  

Yes. As a cybersecurity company, trust is everything between Pondurance and our customers. We have gone to tremendous lengths to ensure that Kanati will deliver exceptional value to you, while providing the highest security standards designed for Agentic AI.  To this end Kanati’s visibility is restricted to each customer’s data tenancy, and all data is maintained by Pondurance alone, in a US-based AWS platform. Amazon Bedrock was chosen as the AI infrastructure for Kanati, specifically so that we could be sure we had complete and total control over all data, models, and training for Kanati, and customer data is never permitted to be used for general or external model training. 

Who Can Take Advantage of Kanati Benefits?

With Kanati, we have reimagined how the SOC can be made more effective while operating at machine speed. As a result, it is foundational to the SOC operations and services we provide to all of our customers. So all Pondurance MDR customers will see tangible benefits and value from our investment in creating, growing, and optimizing Kanati. Of course, if any customer is restricted from using AI due to regulatory compliance, they can opt-out at any time by reaching out to the Pondurance SOC via email, phone, or by opening a service ticket in Scope. 

We’re very excited to be taking this journey with you, we look forward to how it will improve your overall cyber posture and reduce your exposure to data breach risk. For more information on Agentic SOC AI and how it improves the SOC operational model, visit our blog frequently over the next several weeks for a series of articles on this topic.