Sirp 6.0.4: Autonomy, Sharpened

Pillar

Autonomous SOC — From Playbooks to Decision Systems

Find out why.

Pillar

Autonomous SOC — From Playbooks to Decision Systems

Find out why.

Autonomous SOC — From Playbooks to Decision Systems

Get a demo

Get a demo

Back

Sirp 6.0.4 isn't just about adding features; it's about precision and trust. We've taken the autonomous foundation you rely on and sharpened its ability to reason, interpret intelligence, and execute actions. The result is a system that thinks more like your best analyst delivering consistent, high-judgment responses, even under massive pressure.

Deepening Threat Intelligence: From Aggregation to Analysis

Sirp's Threat Intelligence engine has evolved from a powerful feed aggregator to a proactive, reasoning analyst. New and enhanced agents work together to eliminate ambiguity at intake, allowing your human analysts to focus purely on interpretation, not preprocessing.

Agent Name	The Problem We Solved	Your Benefit
Threat Classification Agent	Drowning in non-actionable "noise" from feeds.	Auto-filters junk. Only legitimate, actionable threats propagate through the system.
Threat Summarization Agent	Having to read raw, dense feed data to get context.	Instant, concise analyst-ready summaries. Know the relevance, context, and impact at a glance.
Threat Remediation Summary Agent	Figuring out the "why" behind a recommended action.	Clear action and reasoning. Translates observed behavior into justified remediation steps.
Actions Suggestion Agent	Missing immediate, high-value containment steps.	Proposes the next best step (contain, block, follow-up) based on risk and context.
Threat Processing Agent	Dealing with inconsistent, unparsed raw intelligence formats.	Intelligence is pre-structured and normalized before it ever hits a workflow or an analyst.

The bottom line: What enters Sirp is now immediately meaningful, and what leaves it is instantly actionable.

A Controlled Autonomy Layer: Trust Without Guesswork

Autonomy should be a force multiplier, not a risk. In 6.0.4, we've refined the control layer to make autonomous decisions more deliberate, predictable, and fully governable.

Centralized Control

We are uniting all governance and operational controls for the self-driving SOC in one place. The new Autonomy Tab is your command center, ensuring that automated actions are always aligned with your organizational intent:

Automation and Integration Tools: Access all core automation components, including the integration wizard and agent configurations.
Pending Approvals: Review and manage actions requiring human confirmation for full accountability.
Future Policy Hub: This tab will soon become the Policy Hub where all organizational security policies are defined. This ensures that the self-driving SOC is fully driven and governed under your explicitly set organizational rules.

OmniMap Expansion: Shared Context is Shared Memory

OmniMap is now the persistent brain behind your Threat Intelligence. By representing relationships in a continuously evolving graph, it provides context that lasts beyond a single case.

Cumulative Learning: Analysts and agents can instantly understand how threats move, where they intersect with critical assets, and how past responses influence present decisions.
Persistent Context: Indicators, cases, assets, and actions are constantly linked, turning isolated investigations into a cumulative, shared memory.

This shared context significantly improves decision quality over time—the system gets smarter with every investigation.

Extensibility: Bring Your Own Integration (BYOI)

The platform is designed to grow with your ecosystem. Expanded Bring Your Own Integration (BYOI) support allows custom integrations to participate fully in Sirp's decisioning and autonomous workflows. Extend the platform without losing the power of the agents.

Analyst Experience

We've focused on subtle, high-impact improvements to boost analyst speed and platform flexibility:

Refined Threat Intelligence Interface: Reworked case lists, detailed views, and a new side-drawer layout ensure faster investigation and zero context-switching.
Smarter Search & Retrieval: Natural language processing enhances how intelligence is searched. Ask a loose question and the system interprets your intent reliably, no need to remember exact query syntax.

Sirp 6.0.4 is the next major step toward a truly self-directed SOC. It strengthens your platform's ability to reason, decide, and act with accuracy and confidence, allowing your analysts to focus where they matter most.

Deepening Threat Intelligence: From Aggregation to Analysis

Agent Name	The Problem We Solved	Your Benefit
Threat Classification Agent	Drowning in non-actionable "noise" from feeds.	Auto-filters junk. Only legitimate, actionable threats propagate through the system.
Threat Summarization Agent	Having to read raw, dense feed data to get context.	Instant, concise analyst-ready summaries. Know the relevance, context, and impact at a glance.
Threat Remediation Summary Agent	Figuring out the "why" behind a recommended action.	Clear action and reasoning. Translates observed behavior into justified remediation steps.
Actions Suggestion Agent	Missing immediate, high-value containment steps.	Proposes the next best step (contain, block, follow-up) based on risk and context.
Threat Processing Agent	Dealing with inconsistent, unparsed raw intelligence formats.	Intelligence is pre-structured and normalized before it ever hits a workflow or an analyst.

The bottom line: What enters Sirp is now immediately meaningful, and what leaves it is instantly actionable.

A Controlled Autonomy Layer: Trust Without Guesswork

Autonomy should be a force multiplier, not a risk. In 6.0.4, we've refined the control layer to make autonomous decisions more deliberate, predictable, and fully governable.

Centralized Control

Automation and Integration Tools: Access all core automation components, including the integration wizard and agent configurations.
Pending Approvals: Review and manage actions requiring human confirmation for full accountability.
Future Policy Hub: This tab will soon become the Policy Hub where all organizational security policies are defined. This ensures that the self-driving SOC is fully driven and governed under your explicitly set organizational rules.

OmniMap Expansion: Shared Context is Shared Memory

OmniMap is now the persistent brain behind your Threat Intelligence. By representing relationships in a continuously evolving graph, it provides context that lasts beyond a single case.

Cumulative Learning: Analysts and agents can instantly understand how threats move, where they intersect with critical assets, and how past responses influence present decisions.
Persistent Context: Indicators, cases, assets, and actions are constantly linked, turning isolated investigations into a cumulative, shared memory.

This shared context significantly improves decision quality over time—the system gets smarter with every investigation.

Extensibility: Bring Your Own Integration (BYOI)

Analyst Experience

We've focused on subtle, high-impact improvements to boost analyst speed and platform flexibility:

Refined Threat Intelligence Interface: Reworked case lists, detailed views, and a new side-drawer layout ensure faster investigation and zero context-switching.
Smarter Search & Retrieval: Natural language processing enhances how intelligence is searched. Ask a loose question and the system interprets your intent reliably, no need to remember exact query syntax.