Tue, Sept 8 · 9 AM ET · 2 PM UK · 3 PM CEST
Register
LIVE WEBINAR · 30 MINUTES
Thirty minutes on what actually changes when agents run the first pass of your SOC — the operating model, the switching costs, and how to evaluate it.
Save your seat
Recording will be shared with all registrants.
YOUR HOST
Craig Jones
Chief Security Officer, Ontinue
Craig has run security operations on both sides of the table — as a buyer of managed detection and as the CSO of the team building it.
Tuesday, September 8
UK & IRELAND
2:00 PM BST
CENTRAL EUROPE
3:00 PM CEST
US EASTERN
9:00 AM ET
The chain has compressed to minutes. Most response models are still measured in shifts.
Initial access
Phished credential, no malware to catch.
Escalation
Identity path, not an exploit.
Lateral movement
Legitimate tooling, legitimate sessions.
Impact
By the time a human opens the ticket.
Containment
Where an agentic SOC puts it. We’ll show the model in action.
Three things you can use Monday morning
01
A definition that survives a vendor call
What an agentic SOC actually is, the stages of maturity, and how to tell autonomy from automation with a new label.
02
An honest read on switching costs
What the transition really takes — and the compounding cost of deferring it another budget cycle.
03
Six dimensions to score your MDR
A vendor-agnostic evaluation framework you can run against your current provider — including us.
00:00
The modern attack chain
Where today’s intrusions actually break the old model.
00:07
Definition and stages of the agentic SOC
Concept to containment, stage by stage.
00:15
Making the transition
Switching costs, team trust, and where to draw the autonomy line.
00:23
The evaluation framework
Six dimensions for evaluating your MDR provider.
Tuesday, September 8
2:00 PM BST · 3:00 PM CEST · 9:00 AM ET
Register now