Artificial intelligence has become a foundational element in security operations centers (SOCs) over the past two years, moving beyond pilot programs to become a core strategy. A recent survey of 500 security professionals, conducted by Omdia and commissioned by Rapid7, indicates widespread positive outcomes from this shift.
The survey found that 97% of respondents reported positive results from AI implementation, with 98% noting a reduction in alert fatigue and 95% stating that AI helps address staffing shortages. These figures suggest a strong consensus among operational teams regarding AI's effectiveness.
However, a deeper analysis reveals a significant "confidence gap" between frontline SOC teams and executive security leaders. Chief Information Security Officers (CISOs), Chief Security Officers (CSOs), and Vice Presidents of security are 1.6 times more likely than operational security managers to express high concern about how AI vendors manage their organization's security data.
This concern at the executive level is not a contradiction of the positive operational sentiment but rather an indicator of increasing maturity in AI adoption. While initial questions focused on AI's functionality, the current executive-level inquiry centers on governance, accountability, and the implications of AI model failures, such as missed critical threats. These are considered board-level concerns that organizations must address.
The survey also highlighted the importance of balancing human and AI expertise. A substantial 92% of respondents believe AI enhances human analysts rather than replacing them. Nevertheless, 41% are worried about potential over-reliance on AI, fearing that teams might defer to AI even when an experienced analyst could identify issues the model missed. Effective security teams are integrating AI to manage volume through tasks like triage, pattern matching, and initial investigations, while human analysts retain responsibility for decisions requiring context, creativity, and accountability.
The role of Managed Detection and Response (MDR) is also being redefined by AI. Eighty-six percent of respondents believe AI-enabled MDR offers a distinct advantage over traditional methods. When asked about their expectations for AI-enabled MDR providers, the top responses were not primarily about faster detection or higher automation. Instead, 55% prioritized transparency into AI decision-making, 53% sought explicit integration of AI with human analyst expertise, and 52% desired regular updates on model performance and accuracy.
This shift indicates that simply stating "we use AI" is no longer a differentiator for vendors. Buyers now demand detailed explanations of how AI is implemented and how its performance is monitored. The Omdia research provides a benchmark for security leaders to evaluate their AI governance, engage with their boards on AI strategy, and assess whether their MDR providers can meet the growing demand for transparency.
