According to Gartner's analysis, 15% of routine decisions in companies will be taken autonomously by artificial intelligence (AI) agents by 2028. Data such as this reinforce that this category of technology is becoming increasingly strategic for organizations' growth plans, as they help increase the level of productivity and assertiveness of actions.
Felipe Thome, co-founder and COO of CisoX, a startup from the Dfense group, explains that this growth reinforces the difference of these AI tools for assistants. “While Siri, Google Assistant and corporate chatbots in general perform simple and reactive tasks, such as answering emails or managing schedules, agents operate autonomously, being able to monitor environments, detect patterns, predict scenarios and act strategically”, he says.
Because of these characteristics, this aspect of AI is able to enhance human action, allowing teams to focus on complex tasks and high impact on the business, rather than operational and time-consuming activities.The company's expert cites as an example the area of cybersecurity as a sector benefited from this dynamic.
“It is possible to create more robust and accurate information security strategies in a dynamic way, without relying on entire teams and fragmented agendas.This frees up resources and allows companies to adapt their security plans in real time, ensuring relevance and alignment with the current” scenario, he says.
New cybersecurity challengesAlthough innovative, the rise of AI agents also brings many challenges to the cybersecurity industry. The main one is accessibility, since until recently, detailed analysis of risks and vulnerabilities were restricted to large corporations, which had the resources to hire specialized consultants.However, small and medium-sized companies did not have access to these strategic diagnoses, becoming more vulnerable to cyber attacks.
“Information security needs to be an accessible right, not a privilege for those who can afford expensive”, says Thome.“AI AI agents need to have this democratization bias in their development and implementation, reducing barriers and allowing any company to protect their data strategically and efficiently”, he adds.
In the market, some ways to ensure this accessibility have already been highlighted, such as reducing the subscription deadlines of security master plans from three to one year. “In CisoX itself we have managed to significantly reduce the price of our service compared to traditional consultancies due to the annual model, ensuring that companies review their strategies in real time, adjust investments, prioritize projects and stay updated in a scenario of threats in constant evolution”, says the executive.
Leaving the traditional mindset aside
In addition to cost, the old model of hiring specialized consultants also brings other potential problems. This is the case of dependence on individual technical knowledge, which not only opens the door to human failures and inconsistent analysis, but also involves a slower defense implementation process.
In this sense, companies that bring AI agents into their core business are managing to transform this scenario gradually. CisoX, for example, bases the performance of this technology on the NIST (National Institute of Standards and Technology) framework, which allows its platform to conduct assessments with more than 360 criteria to measure the maturity of the information security processes of each client. Thus, the deadline for mapping risks and producing reports of approximately 300 pages is reduced from four months to just two minutes.
“AI agents are proving that automation is not just a beautiful word, but rather a way to ensure efficient, fast and tailored information collection to the context of each” organization, concludes Felipe Thome.
