2 min Security

Trellix brings agentic SOC AI to on-premises and air-gapped environments

Trellix brings agentic SOC AI to on-premises and air-gapped environments

Trellix is launching Wise for Private Cloud, an AI core for the agentic SOC that runs entirely within a company’s own environment. Data is not sent to public LLMs, the pricing model is not token-based, and every AI decision is auditable.

According to the security vendor, Trellix Wise for Private Cloud is the first on-premises, federated AI core for an agentic SOC. The solution runs on-premises, in an air-gapped environment, in a hybrid setup, or in a private cloud. Data remains within the customer’s security perimeter and never goes to a public LLM or an external cloud.

With this product, Trellix is targeting organizations that have had limited ability to use agentic AI in the SOC until now. According to the company, three factors are hindering enterprise adoption: unpredictable costs, loss of control over data, and a lack of insight into how AI reaches its decisions. Trellix cites Hugging Face as an example. There, an investigation into a data breach stalled because a commercial AI model’s guardrails blocked it.

“Our strategy for the AI era is clear: meet AI-powered threats with AI-powered defense,” says CEO Vishal Rao. He says AI not only accelerates attacks but also commercializes them.

Investigate all alerts without a separate data lake

Wise for Private Cloud connects telemetry from AI agents with traditional security sources within the existing infrastructure. The system retrieves data and organizational context from where they already reside. A new data lake is therefore not necessary. Based on this, the AI determines whether a series of alerts indicates a threat or is harmless. The goal is to investigate all incoming alerts.

Each conclusion includes a confidence level, a plain-language explanation, and a detailed report on the AI’s reasoning. This allows analysts to verify how a decision was reached. The pricing model is also different: Trellix charges a predictable price rather than a per-token usage fee. Chief Product Officer Alex Au Yeung says this enables organizations to investigate alerts at scale and make decisions faster.

Tip: Wiz scans critical infrastructure before AI causes it to go off the rails