In the recently released 2026 SANS AI in Cybersecurity Survey, nearly two out of three security professionals said they have been given AI-generated guidance that later turned out to be wrong. Not from an experimental tool off in a sandbox, but from systems built into the security stack they were told to rely on. Security teams should not have to live with that. They need to trust the systems that protect them, which is why trust had to be engineered into the foundation of our security operations platform and agentic security operations center (SOC), not bolted on afterward.
Frontline Threats Demand Frontier Protection
In recent years, attackers have put AI to work at machine speed, automating reconnaissance, phishing, and exploit development at a pace human-led security teams were never built to match. Speed doesn’t favor both sides equally. If an attacker’s tool fails, or an AI-generated exploit produces an incorrect result, the cost to the attacker is close to zero. They try again. Defenders do not get that luxury. An AI agent that makes the wrong call inside an organization’s environment, missing a real threat or acting on a false one, can mean damage to that business, and a win for the attacker. An agentic SOC that moves fast but gets it wrong only benefits attackers.
Meeting frontline threats like these takes more than speed. It takes frontier protection, defenses built on AI capable enough to match the attacker and trustworthy enough to be allowed to act.
Why We Chose to Collaborate with Anthropic
That asymmetry is exactly why trust has to be core to what we build, and why we made the decision to collaborate with Anthropic to help us achieve that. Their mission is to ensure the world safely navigates the transition through transformative AI, and for us here at Arctic Wolf, safety and trustworthy AI are inseparable. That alignment, more than any single feature, is why working together made sense from the start.
The first result of that collaboration was the Aurora Security Assistant, which we unveiled at the RSA Conference in 2025. Built in part with Claude models, it gives customers natural language access to security insight uncovered by the Aurora Superintelligence Platform, helping them get faster answers to complex security questions via a simple, chat-based interface.
Delivering Trust and Safety from the World’s Largest Commercial Agentic SOC
Over the last 18 months, our collaboration has only deepened. Anthropic’s Claude models now run throughout the Aurora Superintelligence Platform, including the agents within the Swarm of Experts, the agentic framework that executes key functions of our SOC. That framework now supports thousands of organizations worldwide and performs more than 200,000 security investigations a week, a scale that makes the Aurora Agentic SOC the largest commercial agentic SOC in the world.
This week, at Arctic Wolf’s annual Security Operations Summit, Arctic Wolf shared the stage with Ash Alhashim, Head of Enterprise Cybersecurity GTM, Anthropic, who spoke to just how far this collaboration has come.
“Arctic Wolf’s team knows security operations deeply, and that shows in how they’ve put Claude to work,” he said from the stage. “We’ve learned a lot from working with them and we’re glad to keep building together.”
Today, the Swarm of Experts in the Aurora Agentic SOC resolves more than 60% of its investigations autonomously, with high confidence. That level of unassisted resolution comes from technology we’ve built, leveraging Anthropic’s models as part of the foundation. The same technology has also helped customers resolve cases 26% faster year over year, which means they are not just getting faster answers but better ones. The occurs because Swarm of Experts draws on real investigations across our entire customer base and on each customer’s own unique environment, so the guidance behind every investigation is tailored to their needs.
Our work together also extends to Anthropic’s Cyber Verification Program, which gives vetted security teams access to Anthropic’s most capable models with reduced blocking classifiers for legitimate cyber work. Arctic Wolf is part of the program and has access at the Defense Access tier, which is built for defensive work such as security operations center and incident response tasks. It is another sign of the trust between our teams, and it helps ensure the models behind the Aurora Agentic SOC can support the demands of real defensive work.
A Collaboration That Will Keep Advancing
In under two years, Arctic Wolf and Anthropic have made incredible strides in advancing agentic security operations together. What began as a single AI security assistant has grown into the reasoning layer behind the world’s largest commercial agentic SOC, delivering faster, more accurate outcomes for thousands of customers around the globe each week.
But the best is yet to come. Arctic Wolf and Anthropic will continue to work together to find new ways to build Claude’s capabilities into the Aurora Superintelligence Platform and deliver new innovations, as both the threats and the SOCs built to stop them keep moving at machine speed.
