Microsoft folds SIEM and threat protection into one Defender foundation it calls the ISOC
Microsoft is building one foundation inside Defender for security operations and native protection, and the reason it gives is that a single operator with an agent framework now does what once took whole teams.
Reality
- Evidence38
- Adoption15
- Hype gap+45
- Incentives92
- Confidence60
Eight security incumbents bought their AI security stories for about $250m each
Forrester counts eight acquirers and upwards of $2.0bn of AI security tuck-ins in 18 months. It also tells CISOs to ask their vendors whether the bought capability will be bundled into the platform or sold separately.
Publishers:forrester.com
Reality
- Evidence36
- Adoption30
- Hype gap+26
- Incentives62
- Confidence44
CrowdStrike wants to be the identity provider your AI agents register with
The new Agentic IdP registers every agent Falcon Guardian finds, issues it a cryptographic identity and brokers short-lived tokens instead of credentials, which quietly makes your discovery coverage the thing that decides the rollout.
Reality
- Evidence36
- Adoption14
- Hype gap+34
- Incentives84
- Confidence57
Palo Alto doubled its platformization count to about 220 in a single quarter
The fiscal 2027 guide of $14.1bn to $14.2bn clears consensus by roughly $310 million, which reads as execution rather than a spending shock. The count of customers collapsing their tools onto one platform is the harder evidence.
Reality
- Evidence57
- Adoption71
- Hype gap+14
- Incentives79
- Confidence63
Buyers priced AI-model risk this quarter by giving CrowdStrike's single agent more authority
CrowdStrike booked $333 million in net new ARR this quarter as CISOs turned Anthropic's Mythos into a budget line. Each module they consolidated onto the one Falcon agent widened what a single automated decision can reach.
Reality
- Evidence45
- Adoption60
- Hype gap+35
- Incentives65
- Confidence55
96% of security teams run AI at triage level. The autonomous SOC case rests on 24 respondents.
SentinelOne's 451 Research survey of 611 practitioners finds AI returns arriving at the bottom of the maturity ladder. It leaves the top of the ladder almost entirely unmeasured.
Reality
- Evidence22
- Adoption38
- Hype gap+58
- Incentives90
- Confidence66
A multiyear alliance targets $1 billion in joint business by 2029. The ratio it is built to sell into is the part most security teams cannot yet enumerate.
Reality
- Evidence55
- Adoption38
- Hype gap+38
- Incentives82
- Confidence66