South Korean Cybersecurity Firm Igloo Reports 83% Auto-Response Rate with New Agentic SOC
Igloo Corp claims its new AI-agent-driven Security Operations Center achieved an 83% automation rate and 15x higher daily event processing.
South Korean cybersecurity firm Igloo Corporation announced on October 27, 2026, that it has deployed an "Agentic Security Operations Center (SOC)" within its own AI-integrated security center. According to the company's self-reported data, the average time for security tasks dropped from 30 minutes to 12 seconds, and the proportion of automated responses among all incidents rose from 0% to 83%.
The system integrates SIEM (Security Information and Event Management), SOAR (Security Orchestration, Automation and Response), and specialized AI agents. Igloo stated that when attacks occur that are not covered by existing policies, AI agents query device logs, use large language models to filter actual threats, and automatically generate new detection policies. This mechanism reduced the time required to generate detection policies from 120 minutes of manual work to 10 minutes, increasing daily policy generation from 20 to 50.
In terms of event handling, SOAR-based automation increased daily event throughput from approximately 200 to 3,000, a 15-fold increase. While AI handles most analysis and initial responses, Igloo emphasized that critical actions such as server isolation still require final human approval. The company currently operates a "human-in-the-loop SOC" and plans to evolve toward a "human-on-the-loop SOC" in the future.