In a rapidly evolving landscape, the adoption of autonomous, AI-driven security operations is accelerating. A recent market update from Omdia highlights that while organisations are quickly embracing agentic AI, the governance structures in place are struggling to keep pace.
The update indicates that 52% of organisations with security operations centres are using agentic AI, yet only a quarter are conducting formal assessments before investing in these technologies, despite their autonomous capabilities. This insight comes from Omdia's Go-to-Market Insights and Advisory practice and adds validation to Foresite Cybersecurity's operations on Google Security Operations (SecOps).
Transformation through governed autonomy
The update reveals a discernible shift across enterprises, with security teams handling increased data volumes efficiently without increasing the workload on investigations. It credits human-in-the-loop accountability as a determinant of successful outcomes, steering clear from mere tool additions. In its validation of Foresite’s security data, Omdia noted significant performance improvements, underscoring the platform’s ability to enhance analyst efficiency while ensuring governed autonomy.
Key findings include a remarkable 60% reduction in mean time to investigate (MTTI), illustrating a faster response timeline. Despite a 278% surge in raw telemetry data, the system effectively managed this growth, maintaining a constant investigation workload. Furthermore, there was a substantial rise in benign-event auto-identification to 86%, illustrating enhanced automation accuracy, allowing analysts to focus on critical threats.
Industry insights on AI-powered security
Organisations are deploying these systems faster than they are assessing them
Tony Palmer, Principal Analyst and Practice Director at Omdia, commented on the rapid adoption rate of agentic AI systems, stating, "The speed of agentic adoption is outrunning the oversight meant to govern it."
"Organisations are deploying these systems faster than they are assessing them. Foresite's approach, autonomous investigation at machine speed with a named practitioner accountable for every high-impact action, is a practical answer to that gap." The discussion highlighted Foresite’s strategy of integrating human oversight into AI-driven security, ensuring all autonomous investigations are validated by a named analyst before being executed.
Foresite's managed security approach
Jeremy Hehl, Chief Evangelist at Foresite, emphasises the reliability of governed AI security solutions, stating, "Autonomous investigation runs at machine speed. The actions you can't take back are validated by a named practitioner before they execute. That is the difference between an agent you can govern and one you are simply told to trust." Foresite’s framework is set up to operate on Google SecOps, empowering clients with the ability to swiftly detect and respond to threats, mitigate investigation fatigue, and maintain audit readiness.
Acknowledgement and future endeavours
Foresite operates as a Google Cloud Premier Partner with specialisations in Security and MSSP, utilising its Catalyst platform to extend Google SecOps capabilities. Recently, Foresite was recognised as the 2026 Google Cloud Security Partner of the Year for North America during the Google Cloud Next '26 event. The Omdia update reinforces previous Catalyst platform validations commissioned by Google, confirming Foresite’s ability to lower mean investigation times by 60% and achieve a 96% customer retention rate alongside lightning-fast automated threat responses.
Foresite representatives are set to participate in Black Hat USA 2026 in Las Vegas, including a collaborative event with Google and an appearance by Jeremy Hehl on the EC-Council podcast with Jay Bavisi.
As organisations move quickly to adopt autonomous, AI-driven security operations, a new 2026 market update from Omdia finds that the adoption of agentic AI is outpacing the governance meant to control it.
Fifty-two percent of organisations with security operations centers already deploy agentic AI, yet only 25 percent formally assess every agentic AI investment, even as these systems take autonomous action. The update, produced by Omdia's Go-to-Market Insights and Advisory practice, extends its technical validation of Foresite Cybersecurity's managed security operations on Google Security Operations (SecOps).
Deliver governed autonomy
The market update examines a shift now visible across the enterprise: security teams are absorbing surging data volumes without adding investigation load, and it points to practitioner-governed, human-in-the-loop accountability as the factor separating durable outcomes from tool sprawl.
Reviewing Foresite's security operations data, Omdia validated several key performance gains that demonstrate the platform's ability to scale analyst effectiveness and deliver governed autonomy.
Raw telemetry data
A ~60% reduction in mean time to investigate (MTTI), accelerating the speed of response. A flat investigation load even as raw telemetry data surged by 278%, proving the system's capacity to handle growth without overburdening analysts. An increase in benign-event auto-identification from 25% to 86%, demonstrating the accuracy of the automation and allowing analysts to focus on critical threats.
Tony Palmer, Principal Analyst and Practice Director, Omdia "The speed of agentic adoption is outrunning the oversight meant to govern it. Organisations are deploying these systems faster than they are assessing them. Foresite's approach, autonomous investigation at machine speed with a named practitioner accountable for every high-impact action, is a practical answer to that gap." — Tony Palmer, Principal Analyst and Practice Director, Omdia.
AI-driven security
Foresite operates as the human control layer for AI-driven security, pairing Google's agentic investigation capabilities with named-practitioner accountability. Every autonomous investigation is reviewed and authorised by a named analyst before response actions execute, giving customers clear visibility into how decisions are made and risk is managed. Autonomous investigation runs at machine speed while a practitioner validates every high-impact action, so agentic never means uncontrolled.
Jeremy Hehl, Chief Evangelist at Foresite, "Autonomous investigation runs at machine speed. The actions you can't take back are validated by a named practitioner before they execute. That is the difference between an agent you can govern and one you are simply told to trust." — Jeremy Hehl, Chief Evangelist at Foresite.
Managed security operations
Foresite delivers fully managed security operations on Google SecOps, enabling customers to detect and respond to threats in seconds, reduce investigation fatigue, and maintain continuous audit readiness without expanding internal teams. As a Google Cloud Premier Partner with Security and MSSP specialisations, the company delivers managed services through its Catalyst platform — extending Google SecOps with operational governance, automation, and continuous compliance.
The market update follows Foresite being named the 2026 Google Cloud Security Partner of the Year for North America, presented at Google Cloud Next '26, and builds on Omdia's original technical validation of the Catalyst platform commissioned by Google in 2025. Across its managed services, and validated in the Omdia update, Foresite reduced mean time to investigate by roughly 60 percent while sustaining 96 percent customer retention and sub-15-second automated threat response.
Foresite representatives will be at Black Hat USA 2026 in Las Vegas, including a happy hour co-hosted with Google and Jeremy Hehl's appearance on the EC-Council podcast with Jay Bavisi.
