South KoreaTechnology and telecom2025 – ongoingAhnLab
AhnLab AI Plus agentic AI for first-pass analysis of security events in its own SOC
AhnLab cut average analysis time per security case from 5 minutes to 2 after adding AI agents to its SOC
Problem
AhnLab's security operations center takes in about 3 TB of logs a day from roughly 500 customer companies. About 20 control staff had to assess each event by hand, and case volume kept rising.
Approach
AhnLab built AhnLab AI Plus, an agentic AI platform on its own security data, and put it into its SOC. The agents judge threat severity, customer impact and whether an event is malicious, then draft a first-pass response report. Human analysts check the report and decide whether a breach occurred. AhnLab says it wants to extend the system to response, attack-surface assessment and vulnerability management.
Results
Takeaway
The AI writes the first draft and the analyst keeps the final call. That split let the same team handle far more cases.
Categories
- Industry
- Technology and telecom
- Business function
- Production and qualityIT and R&D
- Innovation type
- Process innovation
- AI technology
- AI agentsGenerative AI
- Adoption
- Built in-house
- Evidence
- Company's own claim
Sources
Source summaries
A reporter visited AhnLab's SOC and described how AI agents draft first-pass reports. The AI handles half of daily events within 20 seconds and most within 50 seconds. Average analysis time fell from 5 to 2 minutes, efficiency per staff member rose 2.5x, and annual cases grew from 293,800 to 863,100.
Full details are in the original sources.
