Proofpoint SOC Analyst Agent Uses OpenAI Cyber Models
Proofpoint launched its SOC Analyst Agent in private preview, using OpenAI Daybreak models to automate security investigations with human-controlled remediation, GA expected end of Q3 2026.
The SOC Analyst Agent uses OpenAI Daybreak cyber models to enable natural-language investigations across Proofpoint alerts, logs, DLP events and user risk signals, and to automate recurring threat hunts, data security investigations and escalation reporting. It is currently in private preview with general availability expected by the end of Q3 2026, and it does not independently make account changes or take remediation actions. Proofpoint joined the OpenAI Daybreak Defense Network in June 2026 and is exploring additional uses for the models in threat research, data security and AI security workflows.
- Agent enables natural-language investigations across Proofpoint alerts, DLP events and user risk signals.
- Automates recurring threat hunts, data security investigations and escalation reporting workflows.
- Keeps humans in control; does not take consequential remediation actions independently.
- Private preview now; general availability expected by end of Q3 2026.
- Vendors
- ProofpointOpenAI
- Organizations
- OpenAI
- AI models
- OpenAI Daybreak
From the original article
2 min read at proofpoint.com
Channel Insider content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More Proofpoint has launched its SOC Analyst Agent, an agentic AI capability that uses OpenAI Daybreak models to help security teams investigate threats, connect signals across Proofpoint products, and automate recurring analysis.
By Luis Millares · proofpoint.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.