Embed Security adds tools to teach its AI SOC Platform
First merged summary.
Embed Security announced features that let teams encode how they investigate and get SIEM detection recommendations.
Embed Security announced features that let security teams teach its AI SOC Platform how they investigate, what matters in their environment, and how to improve detections. Customer-built iSteps turn natural-language investigative steps into agents on Embed’s existing orchestration framework; according to Embed, they combine deterministic logic with LLM reasoning. NoiseIQ Memories adds changing organisational context. Detection Engineering uses investigation outcomes to recommend changes to customer-authored detections in supported SIEM platforms across endpoint, cloud, email and identity. CEO Seth Summersett said teams should teach AI rather than build agents.
- Customer-built iSteps turn natural-language steps into investigations on Embed’s orchestration.
- Embed says iSteps combine deterministic logic with LLM reasoning.
- NoiseIQ Memories stores changing organisational context for investigations.
- Detection Engineering suggests SIEM detection changes from investigation outcomes.
- Recommendations cover endpoint, cloud, email and identity detections.
Timeline
dated events in the reporting · oldest first- Nov 11, 2026Embed announces iSteps, NoiseIQ Memories and Detection Engineering · Help Net Security
What each outlet adds
beyond the shared facts- Help Net SecurityLater update says iSteps mix deterministic logic with LLM reasoning.
Coverage
oldest first · one row per article · UTC- · 9h ago
Help Net SecurityFirst report
Embed Security lets analysts teach its AI SOC how to investigate
Customer iSteps, NoiseIQ Memories and Detection Engineering encode local practice and suggest SIEM detection changes.
- · 6h ago
Embed Security adds teachable investigations to its AI SOC
Customer-built iSteps, NoiseIQ Memories and Detection Engineering encode teams' own investigative practices.