Exabeam Unveils New AI Features to Enhance Security Operations
Exabeam Inc., a leader in behavior intelligence, has announced a suite of new artificial intelligence capabilities designed to enhance its cloud-based New-Scale platform, particularly in the realm of agent-driven investigations. These updates aim to streamline security operations and improve threat detection efficiency.
The company also revealed plans for an AI-based update to its on-premises LogRhythm security information and event management (SIEM) platform, aligning with its vision of creating an intelligent security operations center (SOC). According to Steve Wilson, Exabeam’s Chief AI and Product Officer, the future of the SOC will depend on the collaborative effectiveness of human analysts working alongside AI agents.
In the latest cloud developments, the Nova AI agent, introduced in April 2025, has taken on an expanded role. It now serves as a persistent investigator, conducting contextual analyses and entity profiling across the entire Exabeam platform as incidents unfold. Additionally, Exabeam launched a feature called Related Cases, which automatically groups linked incidents, providing analysts with a comprehensive view and understanding of threat scenarios.
Among the Nova AI clientele is E-Global, a Mexican payment processing company. Eduardo Sulvarán Velázquez, the company’s subdirector of cyber risk management, noted that the integration of AI has allowed analysts to prioritize cases more effectively, enhancing the speed of investigations while preserving essential human judgment.
Exabeam’s recent cloud updates also involve a partnership with Anthropic PBC’s Claude. The introduction of a new Guided Investigation Skills Pack allows analysts to utilize command-line AI agents for incident triaging and investigation processes through natural language commands. Exabeam plans to expand this offering in its Agent Skills Marketplace, beginning with this initial skills pack.
For Claude Enterprise customers, Exabeam has integrated events, prompts, and tool interactions onto a unified timeline. This consolidation facilitates event-time analysis and behavioral correlation, enabling the detection of unauthorized agent activity and anomalous behavioral patterns.
In addition to the cloud advancements, Exabeam is enhancing the LogRhythm platform for organizations that maintain on-premises infrastructure and AI workloads. The new setup incorporates collectors for activity data from OpenAI Group PBC’s ChatGPT, Google LLC’s Gemini, and GitHub Inc.’s Copilot into LogRhythm Intelligence Analytics. A new community Model Context Protocol server ensures that sensitive information remains within the customer’s environment during queries and triage operations.
Exabeam has transitioned LogRhythm from Elasticsearch to OpenSearch, a move that, according to the company, significantly boosts performance and scalability. This upgrade also supports a novel self-service reporting engine that incorporates AI governance and provides audit-ready compliance reports.
The release further introduces new open-source tools via the Open Agent and AI Security Community initiated by Exabeam. A notable addition is the Agentic SOC Skill Suite, which enhances New-Scale capabilities for Claude Code and OpenAI’s Codex. A community marketplace has been established for plugins, simplifying their installation through a single command. Exabeam’s open-sourced agent verification tool, Praxen, has also received updates to enhance its evidence-based scoring methods.