Proofpoint, Inc., a global leader in human and agent cybersecurity, today introduced the Proofpoint SOC Analyst Agent, an agentic AI capability built to help security teams investigate threats faster across Proofpoint security data. Announced from Sunnyvale, California, first Proofpoint capability to emerge from OpenAI Daybreak Defense Network, SOC Analyst Agent brings OpenAI Daybreak models into Proofpoint investigation workflows to turn natural-language questions into structured, traceable findings and recommended next steps while keeping consequential decisions in human hands.
Security teams face growing prioritization challenge as alerts and security data multiply across tools and workflows and increasingly turn to AI to manage volume and complexity of security operations. According to Proofpoint's 2025 Data Security Landscape report, more than half of organizations already use AI-enhanced capabilities to triage and investigate alerts. Yet SOC teams still need to connect signals across security systems, establish context, and determine what deserves attention next. Proofpoint's SOC Analyst Agent helps reduce investigative burden and gives defenders faster path from fragmented signals to informed action.
"The challenge for security teams is to cut through noise to quickly identify which signals matter and reach defensible decision fast enough to act," said Daniel Rapp, Chief Data and AI Officer at Proofpoint. "Proofpoint SOC Analyst Agent brings together our security expertise and data with advanced AI reasoning from OpenAI to give analysts faster path from investigation to action, while keeping people in control of consequential security decisions."
"Our goal through OpenAI Daybreak Defense Network is to give defenders advantage of frontier AI, safely," said McCall McIntyre, Head of Global Cyber Partnerships, OpenAI. "Proofpoint's SOC Analyst Agent shows how frontier AI can help defenders move faster without giving up control. By combining Proofpoint's security data and human-behavior expertise with OpenAI's Daybreak models, analysts can turn fragmented signals into clearer findings, faster investigations, and recommended next steps they can trust."
SOC Analyst Agent plans investigations and draws context from connected Proofpoint security data, including alerts, logs, data loss prevention events, and user risk signals. Instead of switching between consoles or writing individual queries, analysts use natural language to synthesize findings and resolve issues faster.
Agent designed around three core capabilities: Accelerate investigations allowing analysts to investigate security events using natural language across connected Proofpoint products reducing manual work to assemble context; Automate recurring analysis allowing teams to configure scheduled workflows for threat hunts, data security investigations, escalation reporting with results routed to appropriate analysts; Keep analysts in control with findings traceable to underlying source data allowing analysts to validate recommendations. Agent does not independently make account changes, contain threats, or initiate other consequential remediation actions.
SOC Analyst Agent is first capability Proofpoint bringing to market through Daybreak Defense Network, which it joined in June 2026 to apply OpenAI's cyber-tuned models across products, services, and workflows. Proofpoint exploring how OpenAI Daybreak models can support additional defensive workflows including threat research, data security and AI security.
About Proofpoint, Inc.
Proofpoint, Inc. is global leader in human and agent cybersecurity, securing how people, data, and AI agents connect across email, cloud, and collaboration tools. Proofpoint is trusted partner to over 80 of Fortune 100, over 14,000 large enterprises, and millions of smaller organizations in stopping threats, preventing data loss, and building resilience across people and AI workflows.
