Skip to main content

User Knowledge Base

BlueVoyant MDR AI

BlueVoyant AI artificial intelligence (AI) is on a Microsoft enterprise platform for cloud-hosted AI agents. The AI supports Security Operations Center (SOC) analysts in the investigation and response to cybersecurity incidents. AI agents analyze incident data, edit findings for the main points, match incidents to playbooks, and answer analytical questions about your security system.

BlueVoyant AI does not replace human SOC experts. It makes it easier for analysts to see the main points and next best actions.

BlueVoyant AI AI Architecture:
  • AI agents - Each agent has one task. Each has tools that it is can use.

  • Tools - Managed interfaces that agents call to get data.

  • Execution - A Microsoft Azure Function app orchestrates the agents.

  • Data - A database records each agent call with metadata for audits.