Stellar Cyber has released findings from an independent study indicating that its Auto-Triage AI capability, part of its AI-native security operations platform, can match human analyst verdicts on security alerts with 99.7% accuracy. The study, which covered 124 days of customer trials, evaluated 138,475 real security alerts.
The company's Agentic Auto Triage feature aims to address the increasing volume and complexity of security alerts, which have been exacerbated by the rise of GenAI-enhanced tactics used in phishing and ransomware attacks. Reports from the World Economic Forum suggest a significant surge in potential security threats, with ransomware attacks increasing by up to 48% year-over-year and phishing attempts by 1200% since late 2022.
According to the study, Auto Triage returned approximately 19 minutes of every analyst hour to higher-value work. This translates to about one day per week per analyst, or the equivalent of 1.5 full-time analysts annually, allowing teams to manage more cases and dedicate time to exposure management and anticipating adversary behavior.
The AI-driven system processes suspicious events by ingesting, correlating, analyzing, and prioritizing them. During the trials, the platform analyzed 138,475 alerts, confidently closing 64% of them as false positives. It escalated 15% of the alerts as true positives for human review, with the remainder routed as informational, effectively reducing noise for analysts.
The Auto Triage system assigns a decision to each alert through an AI-driven Verdict Signal Check, incorporating human oversight and a closed-loop learning process designed to improve accuracy over time. The machine learning models used are trained on real-world phishing patterns to deliver actionable verdicts rapidly.
Stellar Cyber's CTO, Aimei Wei, stated that the study demonstrates the effectiveness of combining machine-speed analysis with human judgment, freeing analysts to manage more cases and proactively address emerging exposures. Christopher M. Steffen, VP of Research, Information Security, Risk, and Compliance Management at EMA, noted that the study validates Stellar Cyber's approach to transforming how analysts work in enterprise SOCs, shifting focus from processing alerts to managing cases and reducing exposure.
For Managed Security Service Providers (MSSPs), the reclaimed analyst capacity translates into broader coverage and improved customer service. Chant Vartanian, CEO of M-Theory Group, commented that the ability to close 64% of false positives and return a full day of productivity per analyst is transformative, allowing teams to focus on high-value threat investigation and exposure management without needing costly headcount expansion.
The Auto Triage capability is currently available as part of the Stellar Cyber AI-native SecOps platform. Stellar Cyber plans to showcase Auto Triage and the study results at Black Hat USA, from August 1-6, 2026, in Las Vegas.
