Sevii Launches AI Module for Autonomous

Sevii has extended its Autonomous Defense & Remediation (ADR) platform with a new AI security module. The company states this is a direct response to the increasing speed and scope of AI-driven attacks, which it says requires an AI defense capable of immediate, autonomous action.

According to Sevii, its new module intercepts alerts from a customer's security detection stack before they reach the Security Operations Center (SOC). It then uses AI agents, which the firm calls 'cyber warriors', to analyze the threat. This analysis includes a seven-day retrospective context hunt to determine if the detected activity is normal or abnormal, confirming whether it is a genuine AI attack.

How the AI Defense Module Operates

The process begins when an alert is received. Sevii's AI module ingests these alerts in real-time. While existing tools may simply report detections, Sevii's system is designed to respond instantly. The AI agents perform a hunt to gather data, reverse-engineer the attack, and take necessary action.

If remediation is required, it can be executed autonomously or triggered by a human defender. Sevii's CEO and co-founder, Curt Aubley, commented on the need for speed, stating, "Having a human in the loop may be required by today’s governance policy."

The Remediation Process in Action

Sevii's remediation can be immediate. While gathering context, if the system detects a high volume of data exfiltration, it performs an instant intelligence search. It checks if the activity is standard, where the data is going, and if the destination is a known malicious command-and-control server. Knowledge of a bad destination could be as recent as 15 minutes old, but Sevii claims its system already incorporates it.

Aubley explained the response: "We will absolutely immediately stop that activity and autonomously do an impact analysis as well to see what data left and how quickly we stopped it." A standard example involves a compromised employee laptop. Upon detection, the system validates the threat as a true positive.

The next step is isolation. "We will isolate the laptop and disable the account, remove those sessions from that account, and force the person to reset their password," said Aubley. This stops the adversary from logging into other systems. The system then securely connects to the laptop to remove malicious processes and registry entries.

Speed and Effectiveness Against AI Attacks

Sevii claims this complete AI-driven autonomous process typically takes between two and fifteen minutes, resulting in minimal downtime. The company states that an AI attack typically takes between 30 seconds and 30 minutes to execute, with an average duration matching the 15 minutes Sevii needs for remediation.

The following table compares the timelines involved, as stated by Sevii:

This positioning allows Sevii to describe its new AIDR module as a successful attempt to fight AI-speed attacks with machine-speed defense. The platform is designed to operate at runtime, irrespective of the source of the attack, which Sevii argues is critical given organizational use of shadow AI.