{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/questions/can-agents-defend-autonomously/",
 "asOf": "2026-09-26",
 "id": "can-agents-defend-autonomously",
 "order": 6,
 "question": "Can AI agents defend and oversee systems on their own?",
 "topics": [
  "autonomous-defense",
  "soc-automation",
  "monitoring-and-control"
 ],
 "answers": [
  {
   "on": "2026-09-25",
   "short": "Not yet. Agents are weak on realistic defensive benchmarks and monitors can be evaded; assistants help analysts who stay in charge.",
   "body": "LLM agents perform poorly on realistic threat-hunting and investigation benchmarks, while vendor-run trials report assistants speeding up analysts who remain in charge. Agent monitors can be driven to miss covert actions under optimized attack, so catch rates measured against ordinary mistakes say little about adversarial settings.",
   "confidence": "moderate",
   "findings": [
    "soc-agents-weak-on-realistic-benchmarks",
    "assistants-speed-up-analysts",
    "monitors-can-be-evaded",
    "production-monitors-catch-escalated-incidents"
   ],
   "methods": [
    "ai-monitoring",
    "human-approval"
   ],
   "why": "First answer, drawn from the findings linked here."
  }
 ],
 "reviewedOn": "2026-09-25",
 "wouldChange": "Independent results showing agents matching analysts on realistic investigation benchmarks, or monitors that hold under adaptive red-teaming.",
 "review": "assistant-drafted"
}