MINNEAPOLIS, Sept. 10, 2026 — Data analytics and security firm Gravwell has officially launched Gravwell 5.10, a significant update to its platform that introduces “environment-aware” AI agents. By performing multi-step workflows directly within a user’s deployment, these agents aim to bridge the gap between automated detection and human-led security analysis.
In modern IT and security operations, AI models are often limited by the pre-assembled data they are provided, such as isolated alerts or static case files. Gravwell’s new approach flips this model by allowing agents to interact directly with the live operational environment. These agents can pull context from real-time telemetry, system states, active flow logs, and existing security playbooks to perform complex investigations, troubleshoot platform issues, and generate actionable evidence.
Corey Thuen, CEO and co-founder of Gravwell, emphasized that the goal is to provide autonomy without losing the necessary human oversight. “Autonomy without context or boundaries can create more problems than it solves,” Thuen said. “Gravwell agents can gather the context they need from the customer’s actual environment while operating within defined tools, permissions and procedures. That gives security teams a controlled path toward greater autonomy without giving AI unrestricted access to security operations.”
The Gravwell 5.10 release includes five specialized agents, each designed to handle specific facets of security and infrastructure management:
- Case Agent: Designed as an interactive partner for threat hunters, this agent can draft and execute queries, interpret results, and suggest investigative pivots.
- Alert Triage Agent: This agent sits between detection systems and human analysts, processing incoming alerts by gathering supporting evidence and compiling an initial investigation report, thereby reducing the time spent on manual data gathering.
- Admin Agent: Focused on platform health, this tool assists administrators by answering questions regarding system configuration, access controls, data ingestion, and overall performance.
- Daily Summary Agent: Each night, this agent reviews the day’s telemetry, identifies noteworthy activity, and provides analysts with recommended queries for the following morning.
- Audit Agent: Acting as a system hygiene expert, this tool performs read-only assessments of automation flows, alerts, and data feeds to identify issues like stalled searches or dead data connections, prioritizing them in a final report.
To ensure transparency and security, the AI agents are delivered through an “AI Agent Preview kit,” which includes clearly defined permissions and operational procedures. Unlike many AI integrations in the enterprise space, Gravwell provides an in-product visualization feature that allows users to monitor the agent’s decision-making process. This shows analysts exactly what data the agent accessed, how it interpreted its instructions, and the reasoning behind its conclusions.
By offloading repetitive tasks—such as evidence aggregation and basic system auditing—to these specialized agents, Gravwell aims to allow security teams to focus exclusively on work requiring high-level human judgment.
The new functionality is available across all Gravwell editions, including the Community Edition, as the company seeks to lower the barrier for organizations looking to integrate AI into their security operations without the cost penalties often associated with premium AI tiers. This deployment marks a shift toward more integrated, context-sensitive automation in the security sector, moving away from “black box” AI toward transparent, audited operational workflows.
Disclaimer: This content is auto-generated for informational purposes only.
Source: Read Original News
