Arctic Wolf Networks - Experts & Thought Leaders

Arctic Wolf®, the cybersecurity and AI company, announces a strategic partnership with Veeam, the Data and AI Trust Company, to bring backup and recovery intelligence into the Aurora® Superintelligence Platform, Arctic Wolf’s AI-native security operations platform, helping organisations strengthen security and improve cyber resilience. By integrating Veeam Data Platform events with the Arctic Wolf Aurora Superintelligence Platform and the Aurora Agentic SOC, organisations can extend visibility into critical backup infrastructure, reduce security blind spots, and improve their ability to detect, investigate, and respond to cyber threats. Sophisticated cyber threats As organisations face increasingly sophisticated cyber threats, with AI accelerating both the speed and scale of attacks, backup and recovery environments have become attractive targets for attackers seeking to disrupt operations and increase the impact of an incident. At the same time, growing volumes of security data and limited resources make it harder for security teams to identify the threats that matter most and understand their potential business impact. For many organisations, these risks have already become reality. Arctic Wolf’s 2026 AI & Cybersecurity Trends Report found that 63% of surveyed organisations experienced a significant cybersecurity incident in the past year. In those moments, recovery systems become critical to restoring operations and maintaining business continuity. Yet when backup activity remains siloed from broader security operations, analysts often lack the context needed to quickly assess suspicious activity, understand the scope of an attack, and support recovery efforts. Broader security operations To address this challenge, Veeam security and operational events flow into the Aurora Superintelligence Platform, where Arctic Wolf analyses them alongside more than 10 trillion security events processed each week across customer environments. Arctic Wolf monitors key backup and recovery activity, including malware detections, suspicious user behaviour, unauthorised restore attempts, failed backup operations, and administrative changes. By applying targeted detections to these signals, Arctic Wolf helps identify meaningful threats and provide security teams with greater visibility into critical recovery infrastructure. “Organisations depend on their recovery environments to maintain business continuity when an incident happens, making visibility into those systems critical for cyber resilience,” said Dan Schiappa, President, Technology and Services at Arctic Wolf. “In the age of AI, security teams don’t need more alerts. They need context to understand what matters and how to respond. By bringing Veeam backup intelligence into the Aurora Superintelligence Platform, we’re helping customers gain a more complete view of their environment, accelerate investigations, and strengthen the resilience outcomes that matter most to their business.” Most critical components For existing Veeam® Software customers using Arctic Wolf, the partnership adds managed security operations to one of the most critical components of their resilience strategy. Organisations can continue to leverage Veeam’s immutable backups, recovery capabilities, and backup integrity verification while gaining additional visibility, threat monitoring, expert investigation, and security context from Arctic Wolf. “Data and AI trust requires security and resilience to operate as one connected discipline,” said Michelle Graff, Senior Vice President for Global Partners and Channel at Veeam. “By bringing Veeam signals into Arctic Wolf’s security operations platform, we are giving organisations greater visibility into threats affecting their critical data and recovery environments. This partnership helps customers strengthen the trusted, secure, and resilient data foundation they need to maintain business continuity and safely accelerate AI at scale.” Better security decisions The partnership builds on the shared commitment of Arctic Wolf and Veeam to help organisations strengthen cyber resilience through greater visibility and coordination across security and recovery environments. The companies plan to further connect security operations and data resilience, bringing exposure management, detection and response, and recovery workflows closer together to help organisations make better security decisions and improve business resilience.

Arctic Wolf®, the cybersecurity and AI company, announces at the 2026 Security Operations Summit new capabilities in the Aurora® Superintelligence Platform that help organisations gain visibility into AI adoption, access security insights faster, and extend protection across customers’ rapidly expanding attack surfaces. As AI adoption accelerates across the enterprise, organisations face a growing challenge that they cannot secure what they cannot see. Employees are rapidly embracing AI-powered tools, security teams are managing increasingly complex environments, and critical security information remains scattered across multiple platforms and applications. Without visibility, organisations can't effectively manage AI risk. As a result, security teams struggle to prioritise risk and take action. According to a report by the Cloud Security Alliance, 98% of organisations experienced unsanctioned AI use. Critical security information To help customers address these challenges, Arctic Wolf is introducing Shadow AI Discovery, a new feature that is designed to uncover and inventory sanctioned or unknown AI tools in use across an organisation. Additionally, the company is adding new Aurora Security Assistant capabilities, and expanded technology integrations that bring more data, intelligence, and visibility into the Aurora Superintelligence Platform. "Security teams are under pressure to move faster while managing more data, more threats, and more AI risk than ever before," said Nick Schneider, president and chief executive officer at Arctic Wolf. “Visibility is the foundation of security in the age of AI. The advancements we are introducing today of the Aurora Superintelligence Platform help customers understand how AI is being used across their environment so they can establish stronger management processes and act on insights in real time.” Data exposure risks AI adoption is happening faster than many organisations can inventory, manage, or assess risk. According to the SANS 2026 AI Survey, 63% of practitioners cite a lack of visibility into where AI models are being used and what information they may expose. Soon available to Aurora Managed Detection and Response® (MDR) customers, Shadow AI Discovery is designed to identify AI tools in use across network, identity, and endpoint telemetry to create an inventory of AI activity, enable classification as sanctioned or unknown, and highlight potential data exposure risks without requiring additional deployments. AI-focused training With a centralised inventory of AI usage, organisations can better identify unauthorised tools, measure AI adoption trends, and evaluate the effectiveness of governance policies over time. When gaps are identified, organisations can assign AI-focused training through Aurora Security Awareness and Training to teach employees AI best practices and reduce human risk. Arctic Wolf is also significantly enhancing Aurora Security Assistant, the natural language interface to the Aurora Superintelligence Platform, with new skills that provide greater access to insights across the Arctic Wolf portfolio. Customers can now get information from Aurora Exposure Management, Aurora Threat Intelligence, and their own Security Journey, helping them to investigate issues faster and prioritise with context, all through simple, natural language conversation. Identifying critical vulnerabilities The new skills enable customers to ask questions about outstanding Security Posture In-Depth Review (SPiDR) findings and Security Journey actions, such as what requires attention, which reviews need a response, and what steps should be taken next. They can also quickly understand their current risk posture by identifying critical vulnerabilities, riskiest assets, and endpoints that failed recent vulnerability scans. Grounded in the Security Operations Graph of the Aurora Superintelligence Platform®, Aurora Security Assistant helps customers move from searching for information to taking action, providing self-service access to security insights, recommendations, and operational context in seconds. Existing technology investments Arctic Wolf is further expanding the Aurora Superintelligence Platform with multiple new technology integrations enabled by the platform's Open Data Pipeline, which converts raw telemetry from across a customer's attack surface into high-quality security signal. These integrations broaden the telemetry monitored by the Aurora Agentic SOC and extend detection and active response capabilities across customers’ existing environments, so organisations enhance the value of the technologies they already use without replacing them. New coverage includes: Web Application Firewalls (WAFs): New Cloudflare and Imperva integrations enable detection and active response for threats targeting web applications and services, helping customers respond faster to malicious activity. Backup and Recovery: A new integration with Veeam brings backup and recovery intelligence into the Aurora Superintelligence Platform, extending visibility into backup infrastructure that attackers increasingly target to disrupt recovery efforts. Medical Provider Applications: New integrations with Epic Systems EHR, Claroty xDome Healthcare, and Imprivata ITDR. Additional integrations: ExtraHop Reveal(x) 360, Datadog, Proofpoint Essentials, 1Password, Google Workspace, Trend Vision One Endpoint Security, Palo Alto Cortex, and Claroty xDome Industrial. Together, these integrations bring even more of the customers’ security ecosystem into the Aurora Superintelligence Platform, helping them expand visibility, strengthen detection and response, and get more value from their existing technology investments.

Arctic Wolf®, the cybersecurity and AI company, today at the 2026 Security Operations Summit announced SwarmView™, a new capability that brings the power of the Swarm of Experts™ directly to customers, providing unprecedented visibility into how the Aurora Agentic SOC® investigates, validates, and responds to modern threats at machine speed. By providing a direct view into how AI agents and human experts work together throughout every investigation, SwarmView gives organisations transparency into how AI-driven decisions are made and how security outcomes are delivered on their behalf. Today's modern attacks move faster than human teams can track, and organisations increasingly rely on AI to make security decisions. Yet adoption depends on trust. Security leaders want to be able to understand how threats are investigated, how conclusions are reached, where human expertise applies, and ultimately, why those outcomes can be trusted. According to the SANS 2026 AI Survey, 40% of security leaders cite transparency and trust in AI decisions as their top AI integration challenge, highlighting the need for greater visibility into how AI systems operate, make decisions, and take action. Until now, that process has largely happened behind the scenes. AI-driven security investigations SwarmView changes that. For the first time, customers can access the operational engine behind the world's largest commercial agentic SOC that makes AI-driven security investigations more transparent and understandable. By bringing the power of the Swarm of Experts into view through a single tool, SwarmView enables organisations to see how threats are analysed, how conclusions are reached, and how AI agents and human security experts work together to defend against modern threats at machine speed. SwarmView delivers access to Arctic Wolf's innovative Swarm of Experts framework, allowing customers to better understand the agentic actions behind security decisions. Building on the introduction of the AI Trust Engine™ and the company's commitment to making AI secure, explainable, and accountable, SwarmView represents the next step in helping organisations build confidence through transparency in AI-driven security outcomes. Enabling rapid investigation Earlier this year, Arctic Wolf introduced its patent-pending Swarm of Experts framework to revolutionise how trusted and verified agentic actions are leveraged to deliver reliable security outcomes. The framework combines a large team of specialised AI agents with experienced Arctic Wolf security analysts, enabling rapid investigation and response while maintaining human oversight where it matters most. Around the clock, specialised AI agents work alongside Arctic Wolf's human security experts to investigate, validate, and respond to threats, while human experts remain involved in critical decisions and escalations. The Swarm of Experts enables seasoned analysts to serve as expert validation points for incident escalations while continuously improving model performance with real-world expertise gained from protecting more than 11,000 customers worldwide. AI-powered security operations "Organisations rely on AI for critical decisions but they can’t trust in those decisions without transparency,” said Nick Schneider, president and chief executive officer at Arctic Wolf. "For too long, security teams have been asked to trust outcomes without understanding how those outcomes were reached. SwarmView changes that. We're giving customers direct visibility into the people, agents, decisions, and actions behind investigations, setting a new standard for accountability and trust in AI-powered security operations." Decision-making process SwarmView, a new capability in the Arctic Wolf Portal, provides customers with a detailed view of the agentic and human actions taken throughout every security investigation. As a result, customers can execute on the following: Review the full investigation. Follow an investigation from the first signal to the final conclusion. See which agents contributed, how they performed each step in the investigation, and how they validated each conclusion. Track the defence chain. See events and actions taken at each stage, so customers understand the defence chain in one place. Grounded in unique customer context. See the unique customer context about the environment that was used in the decision-making process. Know when a human steps in. See where a decision moved to a human expert and why it made that decision. By making the work of the Aurora Agentic SOC more transparent, SwarmView gives organisations greater confidence in security outcomes, a front-row seat to defence chains, and analyst-level insight without requiring technical expertise. SwarmView will be available as a beta in the Arctic Wolf Portal this fall.