Infoblox Inc. today announces an industry-first, AI-driven security operations solution, SOC Insights, that boosts its DNS Detection and Response solution, BloxOne Threat Defence. SOC Insights empowers Australian and New Zealand (A/NZ) security analysts to jump-start investigations that truly matter and dramatically reduce response time by turning vast amounts of security events, network, ecosystem, and unique DNS intelligence data into a manageable set of immediate, actionable insights at AI speed.

Going beyond simple malware risk-based dashboards, SOC Insights enables cybersecurity teams to reduce mean-time-to-respond (MTTR) by eliminating wasted time by consolidating individual alerts into unique insights. Each insight provides easy access to device, event, and attacker infrastructure details and Infoblox’s unique DNS intelligence data. This eliminates the need for SecOps teams to spend time tracking each individual alert or waiting on NetOps for user and device information for context around threat activity.

“SOC Insights is a game-changer for SecOps, allowing them to focus on what really matters, especially when they’re up against limited budget and resources,” said Craig Sanderson, Vice President, Security and Product Management, Infoblox. “At Infoblox, we envision a future where AI-driven analytics and DNS-driven intelligence dramatically elevate SecOps efficiency, with SOC Insights setting the industry standard.”

With evolving technologies like generative AI and cloud, and the continued cyber security skills shortage emphasised in Australia by the need for nearly 17,000 professionals by 2026, the growth of sophisticated attacks is now resulting in more business risk and exposure than ever.

“Australia and New Zealand’s cyber security skills shortage is so great that it can’t be solved by getting more people into the industry alone,” said Scott Morris, Managing Director Australia and New Zealand, Infoblox.
“SOC Insights delivers AI-driven insights in a way the industry hasn’t seen before, aligning to the new Cyber Security Strategy’s call for ‘real-time threat sharing to facilitate automated threat-blocking capabilities’. Enhanced DNS intelligence will help under-pressure security teams block cyber-attacks before they impact people, government, or businesses by filtering, sorting, and prioritising threats for them while they focus on what really matters.”

With SOC Insights, Infoblox BloxOne Threat Defence can help in eliminating critical SecOps team challenges such as:

• Increasingly complex cyber-attacks: Apply unique DNS threat intelligence to identify threats other tools will miss and proactively disrupt adversaries’ infrastructure to stop threats before they occur.
• Alert fatigue: Quickly identify which events matter the most by narrowing down hundreds of thousands of alerts to a more manageable set of insights with actionable guidance to accelerate the investigation and remediation process.
• Lengthy incident response times: Eliminate wasted time collecting, filtering, and interpreting vast amounts of event, network, and unique DNS intelligence data to enable SecOps to quickly or automatically initiate response activities.
• Underutilised existing security ecosystem:  Share AI-driven insights with correlated and filtered data to trigger automated responses, making other tools in the security stack more effective, further improving the efficiency of SOC tools and teams.

“DNS is poised to help organisations improve security posture and take a proactive approach to preventing breaches, as well as faster time to remediation of ones that do occur. Bad actors are becoming more sophisticated in attacks, leveraging AI to their advantage. SOC Insights has the potential to allow defenders to stay one step ahead of attackers without any guesswork,” said Will Townsend, VP & Principal Analyst, Moor Insights & Strategy. “By applying AI to vast amounts of DNS and network data, Infoblox is able to provide security teams with proactive threat disruption, insightful analytics, and intelligent ecosystem integrations.”

“Infoblox’s SOC Insights represents a shift in how security operations centres can leverage AI to transform overwhelming volumes of data into precise, actionable intelligence,” said Steven Dickens, VP and Practice Leader, the Futurum Group. “By integrating unique DNS intelligence with AI-driven analytics, SOC Insights not only streamlines SecOps workflows but also sets a new industry benchmark for proactive threat detection and response, ensuring that security teams can stay ahead of increasingly sophisticated cyber threats.”

With SOC Insights, Managed Security Service Providers (MSSPs) can help their customers improve their security posture, optimise their security investments, and streamline their operations. IT channel partners can also unlock new opportunities to sell or uplift other solutions in the Infoblox Security Ecosystem.

SOC Insights is available in Australia and New Zealand now.

For more information on SOC Insights and BloxOne Threat Defence capabilities, click here.