CISOs and security teams are racing to put AI agents into the SOC. In fact, a recent AWS survey of 2,800 tech and security decision-makers found that 38% plan to deploy AI agents in the SOC over the next year. And Gartner recently reported that 42% of cybersecurity leaders are already piloting AI agents for threat detection and response capabilities. Pushed by C-Suites that want to implement AI across their organizations and get on equal footing with cyberattackers already harnessing AI, the promise of agentic in SOCs is intoxicating. They show the potential to compress mean-time-to-triage, tame alert floods, and give human analysts time back for high-value work. But amid the rush, a simple truth keeps getting lost: AI agents are only as good as the data they’re fed. If your telemetry is fragmented, your schemas are inconsistent, or your context is missing, you won’t get faster responses from AI SOC agents.

Full report : AI agents will change how SOCs work, but they won’t save a broken data foundation.