Breaking News: Automation Slashes Analyst Workload by 35% Even as Alerts Surge
New data from SentinelOne reveals that automation is the real driver of operational speed in modern cybersecurity, not artificial intelligence. Despite a 63% increase in total alerts, proper automation saved analysts approximately 35% of manual workload, according to internal company figures.
“Adversaries are operating almost entirely at machine speed. Human operators alone cannot keep up. Automation is the only way defenders can reclaim the tempo,” said a senior SentinelOne security strategist.
The Speed Gap and the Automation Answer
Traditional human-centered defenses are failing as attack execution moves to automated, AI-powered intrusions. The window for response is shrinking, and reactive triage is no longer sufficient.
Automation enables proactive intervention by integrating AI insights into hardened workflows. This allows security teams to close gaps before attackers exploit them, reducing dwell time significantly.
AI as Insight, Not Just Hype
While AI provides context and predictive intelligence, it is automation that executes tasks at speed. “The irony is that the AI tools we deploy to defend ourselves now need defending,” noted a cybersecurity analyst familiar with the research.
Security leaders now distinguish between two disciplines: Security for AI – protecting AI models, agentic systems, and managing autonomous agents; and AI for Security – using machine learning to detect behavioral patterns and predict attacker intent.
Background
The findings build on earlier reports about the Identity Paradox and rising risks at the enterprise edge. Those posts highlighted how attackers gain initial access and use unmanaged devices to escalate privileges.
In the execution phase, adversaries leverage automation to operate at a scale and speed that challenges traditional defenses. Understanding these capabilities is critical for reducing attacker dwell time and maintaining operational resilience.
What This Means
Organizations must prioritize automating response workflows to handle the growing alert volume. Without robust automation, AI-generated insights risk overwhelming teams, replicating the same bottlenecks that plagued legacy security operations.
Investing in both AI for security and security for AI is essential. But the clear message from this data is: automation is the foundation, and AI is the accelerator – not the other way around.