Elastic’s AlertZero puts AI agents to work on security alert overload

What happened

today introduced AlertZero, a team of specialized artificial intelligence agents for security operations. Built into Elastic Security, the agents take on alert triage, threat hunting and forensic analysis, and each customer decides how much of that work runs without a person signing off.

AlertZero is aimed at the […] The post Elastic’s AlertZero puts AI agents (AI that carries out multi-step tasks rather than answering one question) to work on security alert overload appeared first on SiliconANGLE . UPDATED 19:08 EDT / OCTOBER 08 2026 SECURITY Elastic’s AlertZero puts AI agents to work on security alert overload by Duncan Riley Enterprise search and security company Elastic N.V.

AlertZero is aimed at the problem of alert overload. Security operations center teams have long had more detections coming in than analysts to work through them, and false positives keep adding to the queue.

Elastic argues that attackers’ use of AI is now making the problem worse. The company’s example is the July attack on Hugging Face Inc.

Elastic said the intrusion generated more than 17,000 events over four days. According to Elastic, security tools could detect each signal on its own, but the hard part was connecting them to see the full attack.

Key facts

• today — introduced: AlertZero, a team of specialized artificial intelligence agents for security operations