Agentic AI Meets Human Expertise: Deepwatch Secures Top MDR Award Again

PALO ALTO, Calif. – October 08, 2026 – The modern enterprise security operations center is drowning. Facing an average of 40,000 security alerts every day—spanning nights, weekends, and holidays—cybersecurity teams are locked in an asymmetric battle against increasingly sophisticated threat actors. It is within this high-stakes environment that Deepwatch, a Palo Alto-based provider of AI-native Managed Detection and Response (MDR), announced today that its Guardian MDR Platform has been named "Managed Security Solution of the Year" at the 10th annual CyberSecurity Breakthrough Awards.

Marking the company's second consecutive victory in this category, the award underscores a critical pivot in the global cybersecurity industry: the transition from rigid, playbook-driven automation to adaptive, agentic artificial intelligence governed by human expertise.

Beyond the Deluge: The Shift to Agentic AI

For years, the cybersecurity industry attempted to solve the alert fatigue crisis with Security Orchestration, Automation, and Response (SOAR) tools. However, traditional SOAR relies heavily on deterministic playbooks. Every time a novel threat emerges or an IT environment changes, engineers must manually rewrite the rules. This engineering burden has left many organizations struggling to scale their defenses against dynamic attack vectors.

Deepwatch's award-winning Guardian MDR Platform takes a radically different approach. At its core is the Deepwatch NEXA ecosystem, launched in late 2025. Unlike legacy automation, NEXA utilizes "agentic AI"—a system capable of synthesizing telemetry, reasoning over hypotheses, and adapting its actions to dynamic environments without requiring a hardcoded playbook for every scenario.

The NEXA ecosystem deploys six specialized intelligent agents working in concert. These include a Continuous Threat Exposure Management (CTEM) agent to prioritize risks with business context, an Investigative agent to automate context enrichment, and an Active Response agent to execute and monitor containment protocols.

"With Deepwatch, organizations move from reactive operations to proactive containment," said Steve Johansson, managing director of CyberSecurity Breakthrough. "Today's enterprises face an average of 40,000 security alerts every day, night, and holiday, all while threats are also increasing in complexity and capability. Technology alone doesn't create security outcomes. But as the attack surface expands, staffing issues persist. The Deepwatch Guardian MDR Platform delivers both AI-native MDR and expert oversight, helping organizations identify the threats that matter most, accelerate investigations, and respond with confidence."

By leveraging this agentic framework, the platform dynamically scores risk and filters out the noise. The company reports this methodology reduces false positives by 98% while delivering a tenfold improvement in threat detection, allowing human analysts to focus on complex, high-risk anomalies rather than sifting through endless raw data.

The Pragmatic Procurement Era: 'No Rip-and-Replace'

The MDR market is experiencing explosive growth, projected by industry analysts to reach $36 billion by 2033. Yet, as budgets tighten and economic pressures mount, Chief Information Security Officers (CISOs) are increasingly resistant to "rip-and-replace" mandates that force them to abandon their existing infrastructure.

Major competitors in the MDR space often require customers to fully adopt their proprietary ecosystems. For instance, industry heavyweights like CrowdStrike offer highly effective, but deeply integrated, endpoint-centric platforms that can be costly and difficult to implement for organizations with vast, heterogeneous tech stacks. Conversely, service-first providers like Arctic Wolf offer platform-agnostic solutions but have historically faced challenges providing deep, cross-domain correlation across complex cloud and identity surfaces.

Deepwatch has carved out its market position by championing a SIEM-agnostic, "bring your own tech" philosophy. The Guardian platform operates seamlessly atop existing enterprise IT and security investments, integrating federated search capabilities across native data locations.

"Our breakthrough platform combines AI-driven operations with the judgment, accountability, and oversight of experienced security professionals," said Brian Dhatt, CEO of Deepwatch. "Organizations need to move faster as threats become more complex, but speed cannot come at the expense of control or transparency. We help security teams reduce operational burden, strengthen their security operations, and stay ahead of threats."

This integration model allows enterprises to maximize the value of tools they have already purchased, significantly lowering the total cost of ownership while rapidly accelerating deployment timelines across sprawling cloud environments.

Cutting Through the AI Hype in Cybersecurity Awards

As the cybersecurity sector becomes saturated with "AI-native" marketing claims, industry accolades are often met with a healthy dose of skepticism by technical practitioners. The CyberSecurity Breakthrough Awards, which evaluated thousands of nominations from over 20 countries this year, are designed to highlight innovation and market impact.

While such award programs typically emphasize broader technological advancement over rigorous, independent penetration testing, the underlying technology powering the Guardian platform has secured distinct, objective validation. Coinciding with its award win, Deepwatch recently achieved ISO/IEC 42001:2023 certification for its NEXA Agentic AI Ecosystem. This international standard for artificial intelligence management systems provides independent verification of the provider's commitment to responsible AI governance, development, and deployment.

Furthermore, verified customer deployments lend credence to the platform's operational impact. Organizations ranging from financial institutions like City National Bank of Florida to global SaaS providers have reported massive reductions in quantified cyber risk, lower cyber insurance premiums, and significantly accelerated audit preparations after deploying this hybrid MDR solution.

Human Oversight in an Autonomous Age

Despite the sophisticated artificial intelligence driving the Guardian MDR Platform, the core differentiator remains an insistence on human governance. The industry is currently grappling with a severe talent shortage, leaving many Security Operations Centers understaffed and overwhelmed by the sheer volume of network telemetry.

Deepwatch addresses this not by replacing the human analyst, but by elevating them. The platform's multimodal Generative AI capabilities do the heavy lifting of data correlation and enrichment. However, experienced security professionals—including SOC analysts, threat hunters, and detection engineers—remain in the loop to validate AI-driven insights, investigate highly complex threats, and align response actions with the specific risk profile of each customer.

To support this human-in-the-loop architecture, the company recently expanded its global footprint, opening a Center of Excellence in Bangalore to accelerate AI-powered cybersecurity innovation and bolster its roster of elite threat hunters.

This collaborative model ensures that while the speed of machine learning is utilized to instantly triage and contain standard threats, the nuanced judgment required for critical security decisions remains firmly in human hands. As threat actors increasingly leverage generative AI to launch highly sophisticated, automated attacks, the combination of agentic AI and elite human expertise is rapidly becoming the baseline requirement for enterprise survival.