The increasing complexity of digital environments makes the management of security incidents an increasingly critical activity for SOCs, who are called upon to interpret large volumes of alerts and quickly identify significant anomalies and correlations. Against this backdrop comes ESII (Early Security Incident Investigation), a project co-funded by Cyber 4.0 as part of its innovation promotion and technology transfer activities.

Developed by Sharelock, ESII- marketed under the name SIA-implements a security incident investigation technology that integrates the use of genAI and Agentic AI into Sharelock’s Identity Security platform.

The goal is to support security teams in alert management by reducing operational complexity and improving the ability to identify, understand, and correlate IT anomalies and incidents throughout the response cycle.

The ESII project and how its technology works

Technology and innovation

From a technological perspective, ESII introduces an evolved model of integration between artificial intelligence and cybersecurity platforms, enabling:

  • Automated analysis of security events;
  • Intelligent investigation of individual anomalies or alert chains;
  • local data processing to provide greater control and security.

Scope of application

  • SOC teams automating triage and investigation of alerts
  • Companies strengthening complex incident management
  • Organizations enhancing threat detection and incident response solutions with AI support

Impact and recognition

ESII fits into the Sharelock technology ecosystem, recently recognized by Gartner among the most innovative solutions in the international landscape ofAgentic AI applied to Threat Detection and Incident Response (TDIR) platforms. In this framework, the project contributes concretely to the evolution of a platform oriented to intelligent automation of incident investigation.

By co-funding Cyber 4.0, ESII has been able to develop and consolidate advanced capabilities for intelligent automation of incident investigation, making a real contribution to the evolution of the cybersecurity industry.