Webinar Description
Key Takeaways
- Practitioner-led discussion examining the emerging agentic SOC concept and its practical implications
- Focuses on distinguishing meaningful autonomy from rebranded automation in security operations
- Designed for developers, AppSec professionals, SOC analysts and security engineers
- Addresses evolving skill requirements as agent-driven tools become prevalent in SOC environments
- Hosted by ReversingLabs as a virtual, discussion-driven webinar
Introduction
“Autonomy, Not Autopilot: Talking Agentic SOC” is a live webinar examining the emerging concept of the agentic Security Operations Center. Hosted by ReversingLabs, the session targets developers, application security practitioners and SOC professionals seeking clarity on what agent-driven automation genuinely offers versus what amounts to marketing repackaging. The topic has gained urgency as security teams face mounting pressure to scale operations while vendors increasingly attach the “agentic” label to their offerings, making it difficult for practitioners to separate substantive capability from industry hype.
About This Event
The webinar adopts a conversational format rather than a traditional presentation structure. Organisers have positioned the session as a peer-to-peer discussion, encouraging attendees to bring questions and scepticism rather than expecting polished product demonstrations. This approach reflects growing practitioner fatigue with vendor-driven narratives around automation technologies, particularly in the security operations space where the gap between marketing claims and operational reality can be substantial.
The format suits the subject matter. Agentic SOC concepts remain sufficiently nascent that definitive best practices have yet to emerge, making open discussion among practitioners more valuable than prescriptive guidance.
Autonomy Versus Automation in Security Operations
Central to the discussion is the distinction between automation and autonomy in SOC environments. Traditional security automation executes predefined playbooks and rules-based responses, requiring human operators to design workflows and handle exceptions. Agentic systems, by contrast, are intended to exercise independent judgment within defined parameters, adapting their behaviour based on context rather than following rigid scripts.
This distinction matters operationally. Security teams already contend with alert fatigue, staffing constraints and the challenge of maintaining coverage across expanding attack surfaces. Agent-driven tools promise to address these pressures by handling routine triage and investigation tasks with greater flexibility than conventional automation. However, the practical boundaries of that autonomy—where human judgment remains essential and where delegation to agents introduces unacceptable risk—remain subjects of active debate within the security community.
Implications for Developers and AppSec Teams
The webinar specifically addresses how agentic SOC developments affect developers and application security practitioners. As security operations increasingly incorporate agent-driven tooling, the interfaces between development workflows and SOC processes will evolve. AppSec professionals may find themselves working alongside autonomous systems that triage vulnerabilities, correlate findings across repositories, or escalate issues based on contextual risk assessment rather than static severity scores.
This shift carries skill implications. Practitioners will need to understand how to configure, supervise and audit agent behaviour, recognising both the capabilities and limitations of these systems. The session aims to clarify what new competencies security professionals should develop as agentic technologies become more prevalent.
Who Should Attend
The webinar is suited to security professionals evaluating or already working with automation technologies in SOC environments. This includes SOC analysts, security engineers, DevSecOps practitioners and technical security leaders responsible for tooling decisions. Professionals from sectors with mature security operations—technology, financial services, healthcare, energy and public sector organisations—will find the discussion particularly relevant as these industries often face both the regulatory scrutiny and operational scale that drive interest in agent-driven approaches.
Navigating Industry Hype
The event’s positioning acknowledges a broader challenge facing security practitioners: distinguishing genuine technological advancement from vendor marketing cycles. The “agentic” terminology has proliferated rapidly across the security industry, applied to products with widely varying capabilities. For security teams making procurement and architecture decisions, this ambiguity creates real operational risk.
By framing the discussion around practical realities rather than aspirational capabilities, the webinar offers practitioners a framework for evaluating agentic claims critically. Understanding what questions to ask—about oversight mechanisms, failure modes, integration requirements and measurable outcomes—helps security leaders make informed decisions as this technology category matures.