Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)

What it does

Blackpoint Cyber, an MDR and ITDR provider focused on managed service providers, made its AI SOC Agent for Identity Threat Detection and Response generally available on July 8, 2026 as its first autonomous response capability. A machine-learning pre-filter separates real threats from noise, and the agent acts only when confidence thresholds are met for attack patterns such as suspicious logins, suspicious inbox rules and other high-fidelity business email compromise indicators. When it acts, it suspends the account, forces a password reset, disrupts active sessions and logs its full reasoning; Blackpoint says this contains credential-based attacks in under two minutes on average and in as little as 21 seconds (vendor claims). Cases outside the validated confidence threshold go to a human analyst in Blackpoint's 24/7 SOC with the agent's reasoning attached. Blackpoint says the agent was trained on years of its SOC analyst decisions, breach forensics and telemetry from nearly a million protected accounts, ran alongside analysts before acting autonomously, and keeps retraining on analyst decisions. It is part of a managed service rather than self-operated software, and it is included in all Blackpoint ITDR service tiers.

Frameworks (vendor-stated)

No framework tags yet.

Pricing (as published)

Not published. The AI SOC Agent is included with all Blackpoint ITDR service tiers at no additional cost (vendor release); ITDR pricing is by quote, mainly sold through MSP partners.

Tasks

incident responsethreat detectionalert triagesecurity operations

Sources

1. blackpointcyber.com/press/blackpoint-cyber-unveils-new-identity-threat-ai-soc-agent/ (primary)
2. blackpointcyber.com/blog/autonomous-identity-threat-detection-and-response-for-msps/
3. blackpointcyber.com/privacy-policy/
4. blackpointcyber.com/company/contact-us/

Last verified 19 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Use-case comparisons

• AI SOC and security-analyst agents — 51 verified listings (Security operations, alert investigation and threat detection)

Compare Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) with

• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• 
  Adaptive Security Agentic Email Security and Phish Triage vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• 
  Aikido Attack AI Pentesting vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• A
  Andesite Human-AI SOC (Azimuth for Government) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• 
  Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• 
  AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• 
  Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• 
  Ares Cyber agentic AI security testing platform (autonomous exploit chaining and runtime verification across SAST, SCA, DAST, VA and pentest) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
• 
  Atomicwork IGA Agent (agentic access provisioning on Atomicwork's AI Workforce) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)

Alternatives

• 
  7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
• 
  Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
• 
  Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.
• A
  Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.

See all Blackpoint AI SOC Agent for ITDR alternatives →

FAQ (from this dataset)

What does Blackpoint AI SOC Agent for ITDR do?

AI SOC agent inside Blackpoint's managed ITDR service that autonomously contains high-confidence credential attacks on Microsoft 365 and Google Workspace accounts: it suspends the account, forces a password reset, ends active sessions and logs its reasoning, and escalates anything below its confidence threshold to a human SOC analyst. Generally available since July 8, 2026.

How much does Blackpoint AI SOC Agent for ITDR cost?

Not published. The AI SOC Agent is included with all Blackpoint ITDR service tiers at no additional cost (vendor release); ITDR pricing is by quote, mainly sold through MSP partners.

Where is Blackpoint Cyber (Blackpoint Holdings, LLC) headquartered?

United States

What are alternatives to Blackpoint AI SOC Agent for ITDR?

See the Blackpoint AI SOC Agent for ITDR alternatives page for category-sharing listings in relevance order, not a ranking. Blackpoint AI SOC Agent for ITDR alternatives.

Stay updated