Cyware, the leader in AI-powered threat intelligence operationalization, secure threat sharing and collaboration, and agentic AI-based security orchestration and automation, today announced the results of an on-site survey conducted at RSA Conference 2026. The survey captured insights from over 100 cybersecurity professionals across enterprises, government agencies, and service providers on how organizations are applying AI and operationalizing threat intelligence within security operations. The findings point to growing AI adoption and the need to improve operational readiness.
77% of security professionals prefer AI-driven tools that operate with analyst oversight over fully independent action.
32% have already established clearly defined governance or guardrails for AI security tools.
Effective automation between CTI and SecOps tools has doubled from 13% to 26% year-over-year.
Real-time threat intelligence sharing rose significantly from 17% to 32%.
78% confirm that AI has already improved threat intelligence operations to some degree.
56% of organizations participate in formal threat sharing networks or are actively planning to join one.
"AI is solidifying its role as an essential part of everyday security operations, driving organizations to prioritize the definition of usage and control frameworks," said Sachin Jade, Chief Product Officer at Cyware. "At RSAC, we introduced our Agentic Fabric approach to meet this exact need by embedding AI directly into threat intelligence workflows, ensuring both powerful automation and the critical need for visibility, control, and analyst oversight are fully maintained."
AI adoption is accelerating rapidly, with a strong emphasis on maintaining analyst control: 77% of respondents advocate for AI solutions that prioritize analyst oversight and control over fully independent action.
Governance frameworks are still developing: 88% of organizations are actively implementing or have already established clearly defined guardrails or governance policies for AI security tools.
AI showing impact across organizations: 78% of respondents confirm that AI has already improved threat intelligence operations to some degree.
Threat intelligence remains underutilized in workflows: 79% of respondents said threat intelligence sharing is critical or very important, signaling a widespread organizational mandate to fully integrate it into detection and response workflows.
Effective automation is rapidly accelerating: The rate of effective automation between CTI and SecOps tools has doubled to 26% (up from 13% last year).
Real-time collaboration is showing growth: Real-time sharing of threat intelligence across SecOps, IR, and vulnerability management has nearly doubled to 32% (up from 17% last year).
Collective defense is growing: 56% of organizations are participating in formal threat sharing networks (35%) or are actively planning to join one (21%).
The findings confirm a shift in how organizations are strategically embracing AI in security. At the same time, intel-driven AI governance is still evolving and needs fast maturity to the next level. Rapid adoption is leading teams to aggressively prioritize the structuring of workflows and establishing precise control mechanisms. As the industry accelerates toward sophisticated agentic AI models, the focus has matured from initial experimentation to enterprise execution: optimizing the consistent application of intelligence across investigation, detection, and response while upholding trust and governance. Cyware's Agentic Fabric approach, unveiled at RSA Conference 2026, focuses on embedding AI directly into threat intelligence workflows, empowering organizations to successfully transition from fragmented signals to coordinated action.
About Cyware
Cyware is leading the industry in operationalized threat intelligence and collective defense, helping security teams transform threat intelligence from fragmented data points to actionable, real-time decisions. We unify threat intelligence management, intel sharing and collaboration, as well as orchestration and automation — eliminating silos and enabling organizations to outmaneuver adversaries faster and more effectively.
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones—and thrive on the tech pulse.