Staffcop, part of the Kontur ecosystem, is introducing AI-powered tools designed to assist information security professionals in investigating incidents. The new functionality allows users to search for events using natural language queries rather than formal rules, enabling the identification of semantically related content beyond exact keyword matches.
The system features LLM-based policies that categorize messages by topic, sentiment, behavioral patterns, and communicative intent. Users can create custom policies to suit specific company requirements. Interaction with the data is facilitated through a chatbot interface, which translates natural language requests into system filters and provides links to original events for context.
Development of the AI component began in September 2025, involving an MVP phase and testing with a pilot client. The solution is designed for deployment within a customer's infrastructure, including isolated environments, and supports the integration of various compatible language models depending on the specific task and available computing resources.
The AI tools are intended to narrow the scope of investigations rather than automate final decision-making, which remains the responsibility of security specialists. Testing for existing clients is scheduled to commence following the release of Staffcop version 5.9, with access managed through personal account representatives.
