Sumo Logic Boosts Security with New AI Tools

UpdatedAugust 5, 2026

Sumo Logic's new SOC Analyst Agent didn't get faster by buying a bigger model. It got faster by refusing to ask the model about raw log lines.

That's the architectural bet behind Sumo Logic's agentic AI suite for security teams, announced this week. The headline isn't "we built another SOC copilot." The headline is "we refused to feed the LLM unstructured logs." That single constraint — only normalized, enriched, correlated telemetry reaches the model — is what produces the 64% reduction in mean time to respond and the 25 hours per analyst per week that Jeremy Powell, Sumo Logic's CISO, says his own SOC is now saving.

It's a useful framing for any team wiring agents into operational data.

This is an excerpt. Read the full post at otf-kit.dev/blog/sumo-logic-security-ai-tools — full-stack kits your AI coding agent can actually ship to production. Browse the kits →

#ai-tools #security #observability

Comments

Join the discussion

No comments yet. Be the first to comment.

More from this blog

Cursor cloud agent subscriptions turn PRs and Slack threads into active work queues

Cursor cloud agent subscriptions change a coding agent from a session you start into a worker that can wake when an event arrives. Cursor says Cloud Agents can monitor pull requests, watch a Slack thr

Sep 1, 20261 min read

Cursor cloud agent subscriptions turn PRs and Slack threads into active work queues

Cursor cloud agent builds make long-running coding sessions start from known state

Cursor cloud agent builds address a boring but expensive part of delegated coding: the agent often spends its first minutes booting a machine, cloning a repository, installing dependencies, and runnin

Sep 1, 20261 min read

Cursor cloud agent builds make long-running coding sessions start from known state

AI provider portability: build one model boundary without hiding provider differences

AI provider portability works when your application owns one stable model boundary while adapters preserve the differences that matter. Do not flatten every provider into a fake universal API. Normali

Sep 1, 20261 min read

AI provider portability: build one model boundary without hiding provider differences

LLM observability for production apps: what to trace, measure, and fix

LLM observability starts with the whole request LLM observability is the practice of connecting a user request to the model calls, retrieval steps, tool calls, latency, cost, and final outcome that fo

Aug 31, 20261 min read

LLM observability for production apps: what to trace, measure, and fix

How to design safe tool permissions for AI agents in production apps

The model is not the authority An AI agent can choose a tool, fill in arguments, and explain what it intends to do. None of those things make it authorized to perform the action. That distinction matt

Aug 31, 20261 min read

How to design safe tool permissions for AI agents in production apps

OTF — kits your AI coding agent can ship to production

496 posts

Engineering notes on shipping production apps with AI coding tools — Claude Code, Cursor, Codex, Lovable, Bolt — and the stack underneath: React Native, Expo, Next.js, Supabase. Honest takes on what works, what breaks, and the full-stack kits that get you to production faster. By OTF.

Command Palette

Comments

More from this blog