Trellix Launches 'Trellix Wise for Private Cloud' to Strengthen On-Premises AI Security for the Agentic SOC

Trellix, a global company in cyber resilience for the AI era, said it has launched 'Trellix Wise™ for Private Cloud,' an AI solution for security operations. 'Trellix Wise for Private Cloud' is an on-premises Federated AI core for the agentic SOC.

The product is designed to extend the security fabric across existing infrastructure and support threat detection and threat response while maintaining data sovereignty, governance, and cost predictability. Trellix said it plans to use the product to strengthen AI-based threat response capabilities and help customers secure cyber resilience.

The solution reflects survey results from 600 CISOs across 14 countries, including the U.S., the U.K., Singapore, and South Korea.

The survey found recognition that AI enables attackers to exploit vulnerabilities faster and reduces the effectiveness of existing security controls. Eighty percent of South Korean CISOs agreed that AI is accelerating attackers' discovery and exploitation of unknown vulnerabilities, and 63% said that the effectiveness of existing security controls is gradually declining due to AI-powered attacks.

Accordingly, domestic CISOs indicated plans to invest in related response capabilities. Forty-seven percent of domestic CISOs said they plan to prioritize investment in tools and capabilities for identifying and responding to zero-day threats, detecting and responding to AI-related risks, and detecting and responding to Non-Human Identity-related risks. However, 57% of domestic CISOs cited a lack of in-house capabilities and expertise as a major obstacle in the process of introducing AI and automation for insider risk management.

Trellix also outlined a response direction suited to these changes. Vishal Rao, CEO of Trellix, said the threat landscape is undergoing a fundamental shift, adding that AI is affecting not only the acceleration of attacks but also the commercialization of attack methods. He then presented a strategy of countering AI-based threats with AI-based defenses and announced a policy of helping customers use AI's speed and precision in the environment they want through Trellix Wise for Private Cloud.

As the use of AI expands, AI is emerging as a key variable on both sides of cyberattack and defense. Attackers are using AI to advance attack tools and speed up vulnerability exploitation, while security teams are facing growing volumes and complexity of telemetry to analyze. As a result, the need to use agentic AI in security operations is expanding.

However, the adoption of agentic AI brings challenges such as difficulty in cost predictability, data control, and transparency in AI decision-making. Against this backdrop, Trellix Wise for Private Cloud is equipped with the ability to connect AI agents and security tool telemetry within the customer's existing infrastructure.

The product is designed to access data, telemetry, and organizational context directly in the environment where they reside, without building a separate data lake, determine whether multiple alerts indicate a real threat or normal activity, and investigate incoming alerts. It also provides judgment results and response guidance that reflect business context, and it is designed to present verifiable evidence for each conclusion.

The solution is deployed in on-premises, air-gapped, hybrid, and Private Cloud environments. All processing is carried out within the customer's environment. Data does not leave the security boundary. There is no transfer of data to a public large language model (LLM), and there is no transfer of data to an external cloud.

The solution adopts a pricing model that does not apply usage-based billing tied to token consumption. Its pricing structure is based on predictable costs. As a result, it helps companies manage costs steadily even as they scale up their use of AI.

The solution applies features that improve the transparency of AI judgments. AI outputs include confidence scores and explanations, and detailed materials are also provided to show the reasoning process. This allows security analysts to verify the basis and process behind AI conclusions. It also helps organizations operate security governance that takes risk into account.

Lee Seokho, head of Trellix Korea, said the pace of change in the domestic threat landscape is outstripping the security team's ability to adapt. He also explained that there is a shortage of specialized personnel needed to adopt AI. He added that if analysts need to re-investigate to confirm the reliability of AI results, the value of such tools is limited.

Trellix said Trellix Wise provides evidence, business context, and the reasoning process, helping security teams make fast, evidence-based decisions within their own environments. It also said AI's key value has been proven in reducing the workload of security teams from alert detection through response.

Based on that stance, Trellix Wise for Private Cloud was developed on the basis of nearly 40 years of accumulated Trellix threat intelligence and Trellix Wise AI technology. Trellix plans to provide agentic AI-based detection, analysis, and response capabilities for the security environments of major companies and institutions.

Trellix also commissioned Vanson Bourne to survey 600 security leaders with CISO or equivalent titles across the Americas, Europe, the Middle East, and Asia-Pacific on how AI affects their organizations' insider risk response methods. Of these, 200 respondents were from Asia-Pacific, and 30 were from South Korea.

Source: TECHWORLD · Kim Kyung-joo
Original: https://www.epnc.co.kr/news/articleView.html?idxno=408200

References

• https://www.epnc.co.kr/news/articleView.html?idxno=408200