Trellix Introduces Private Cloud Solution for Enhanced Security Operations
Today, cybersecurity firm Trellix unveiled Trellix Wise for Private Cloud, a solution designed to enable enterprises to operate its artificial intelligence engine for security operations entirely within their own environments. This launch addresses the hesitations that many large organizations have exhibited in delegating security operations center tasks to AI-driven systems.
David Soto, Trellix’s Chief Information Security Officer, emphasized that these organizations are not averse to the technology itself; rather, they are concerned about the associated trade-offs. He highlighted that sending sensitive security telemetry to public cloud environments poses risks, including unpredictable token costs and a lack of transparency regarding AI decision-making processes.
The Private Cloud version of Trellix Wise offers outcomes with confidence levels, and the company ensures that these results are articulated in straightforward language, allowing for effective auditing and governance. Notably, customers will not incur costs based on token usage. Initially introduced in May 2024, Trellix Wise featured generative AI investigation tools integrated into the company’s extended detection and response platform.
The insights from Soto were revealed in Trellix’s latest “Mind of the CISO” report, released concurrently with the product launch. Conducted by research firm Vanson Bourne Ltd., the study polled 600 Chief Information Security Officers (CISOs) regarding insider risk during August and September. The report advises organizations to consider on-premises or private cloud solutions for sensitive workloads to maintain data within their security perimeters.
In the survey, respondents indicated that AI-driven or autonomous systems were responsible for an average of 28% of insider incidents encountered over the past year. Furthermore, a staggering 99% of CISOs anticipate that AI and automation will play critical roles in managing insider risks within the next two years. However, 40% noted a lack of trust in automated decision-making as a significant barrier to adopting these systems.
According to the survey results, the average organization takes approximately seven hours to detect an insider incident, followed by an additional eight hours to respond. Soto warned that such delays create opportunities for attackers, particularly as cybercriminals increasingly utilize AI to accelerate all stages of their attacks.
In the report, Soto argued that organizations failing to govern AI agents with the same rigor they apply to human employees are effectively engaging with an unmonitored insider on a large scale. Furthermore, the findings revealed that 98% of respondents see a critical role for governments or regulators in helping them better manage insider risks. One U.S. CISO from a financial services firm described the current fragmented state regulations as a nightmare, advocating for a unified regulatory framework to allow companies to safely utilize AI for legitimate business purposes.
Trellix, formally named Musarubra US LLC, was established in 2022 by Symphony Technology Group following the acquisition of McAfee Enterprise and FireEye. The company focuses on providing solutions tailored to modern cybersecurity challenges, including data protection and enterprise security.