At Google Cloud Next, Google unveiled three new AI agents—Threat Hunting, Detection Engineering, and Third-Party Context—to bolster its AI-driven security stack.

The security model is shifting from a solely human-led approach to a human-overseen, AI-led framework designed for scalable, efficient operations.

Existing AI agents like Triage and Investigation have already processed millions of alerts, cutting analysis time from roughly 30 minutes to about one minute.

The Threat Hunting agent continuously searches for emerging attack patterns and stealthy behavior, leveraging Google Threat Intelligence and Mandiant best practices to operate at infinite scale and beyond human speed.

The Detection Engineering agent maps security coverage gaps in IT environments and generates new detections and rules based on findings.

Upcoming Third-Party Context agent will enrich security workflows by integrating data from external third-party sources.

All of these moves are framed within Google Cloud Next, the company's annual event focused on cloud, AI, security, and data analytics.