Elastic Announces AlertZero, a Team of Specialized AI Agents for the Security Operations Lifecycle
Business Wire•08/10/2026•10:14 ET
4
Key Highlights
- ➤Elastic (ESTC) launches AlertZero, an agentic layer for Elastic Security
- ➤AlertZero agents automate alert triage, investigation, threat hunting, and detection tuning
- ➤AlertZero enters Technical Preview across Elastic Cloud, self-managed, and air-gapped environments
- ➤AlertZero supports any model and deployment, with analyst-controlled automation levels
- ➤Autonomous AI attack generated over 17,000 production events in four days
Expert Statements
Mike Nichols, General Manager, Security, Elastic
“What makes AlertZero different is that our team who built it have sat in the SOC analyst's seat”
Mike Nichols, General Manager, Security, Elastic
“We focused on building a platform that gives teams enough visibility and control to deploy agentic automation at the scale and scope they can handle effectively. Every Watch in AlertZero aligns directly with key SOC responsibilities, and the level of autonomy is customizable for each Watch. Security teams get help where they need it most, with the model and deployment that are most effective for their needs.”
Elastic Announces AlertZero, a Team of Specialized AI Agents for the Security Operations Lifecycle
AlertZero gives Elastic Security customers a team of agents that continuously triage, hunt, and investigate, automating the SOC lifecycle so teams can keep pace with a new generation of high-volume, high-velocity threats.
Get started
Create a free account to read the full story.