← Back to Resources

AI in the MSSP SOC: From Pilots to Production

September 16, 2026 · 10:00 AM PT

Every MSSP is under pressure to adopt AI, and most of the advice available is either vendor hype or generic guidance written for enterprise teams with one environment to manage. MSSPs face a harder problem: any AI they adopt has to work across dozens or hundreds of client stacks, respect tenant boundaries, and produce results an analyst can defend to a customer.

In this session, Sr. Solutions Engineer Ken Westin lays out a practical roadmap for bringing AI into service provider security operations. The session covers:

  • Where AI delivers value first: triage, detection engineering, and investigation
  • What your telemetry needs to look like before AI can help: structured, centralized, and consistent across client environments
  • How infrastructure-level AI differs from AI SOC advisory tools: agents that execute with full API access instead of recommending on top of read-only integrations
  • How to keep humans in control with approval workflows and full audit trails, so every AI action is transparent, reviewable, and taken only when you decide
Loading…
Portrait of Ken Westin

Ken Westin

Solutions Engineer at LimaCharlie