Gravwell Inc. has launched version 5.10 of its security data platform, introducing five new artificial intelligence agents. These agents utilize the Model Context Protocol to independently gather investigation context, pulling live telemetry, system states, and saved searches without relying on preassembled alert data.
Three agents are designed to support analysts: the Case Agent assists with query validation and investigation tracking, the Alert Triage Agent prepares reports for incoming detections, and the Daily Summary Agent reviews telemetry to provide actionable insights for the next day.
Two additional agents serve administrators: the Admin Agent manages configuration inquiries regarding access controls and storage, while the Audit Agent performs read-only checks on automations and data flows to identify inefficiencies like duplicate extractors or stalled searches.
The AI Agent Preview kit allows teams to monitor agent activity, including tool usage and decision-making processes. Gravwell CEO Corey Thuen noted that these agents operate within defined permissions to ensure controlled autonomy. The kit is available across all editions, including the free Community version.
Founded in 2017, the Minneapolis-based company secured $15,4 million in a Series A funding round last October, led by Two Bear Capital. The firm positions its platform as an alternative to traditional security information and event management systems.
