CLEVELAND, OH, September 16, 2026 – AgileBlue, an AI-Native Security Operations (SecOps) Platform, today announced the launch of Autonomous Cloud Response, a new capability that automatic contains compromised cloud identities across Office 365, AWS, Microsoft Entra ID, and Google Workspace.
The new capability helps security teams move from simply detecting cloud identity threats to taking immediate action. When malicious activity is confirmed, AgileBlue can automatically contain the affected identity in seconds, blocking new logins, stopping active sessions, and preventing additional access before an attacker can move further through the environment.
Cloud identities have become a major target for attackers. According to Google Cloud, compromised identities are involved in more than 70% of cloud breaches. Once credentials are stolen, attackers can quickly move across cloud infrastructure, SaaS applications, and collaboration tools, making response speed critical.
“Detecting a compromised identity is only part of the job,” said Steve Smith, Chief Technology Officer at AgileBlue. “The real opportunity is reducing the time between knowing something is malicious and stopping it. Autonomous Cloud Response allows our customers to take that action immediately, without waiting for someone to manually execute the response.”
With Autonomous Cloud Response, customers can enable automated containment independently for each supported cloud provider. Once enabled, AgileBlue automatically responds when a case is confirmed as malicious while keeping security teams informed of every action taken.
Key capabilities include:
- Automatic identity containment: Compromised cloud accounts can be contained within seconds of malicious activity being confirmed.
- Multi-cloud response: Supports AWS IAM, Microsoft Entra ID, and Google Workspace, building on AgileBlue’s existing Microsoft 365 response capabilities.
- Complete visibility: Every containment action and outcome is documented within the case for a clear audit trail.
- Customer-controlled automation: Autonomous response is enabled individually by the customer for each cloud provider.
- Human-controlled release: Contained identities are never automatically restored, ensuring that account recovery remains a deliberate security decision.
Autonomous Cloud Response builds on AgileBlue’s existing Autonomous Response capabilities, extending automated containment across the cloud environments organizations rely on every day.
By combining detection, investigation, and response within a single SecOps platform, AgileBlue helps organizations reduce the time between identifying a threat and acting, limiting attacker dwell time and reducing the potential impact of compromised credentials.
Organizations interested in Autonomous Cloud Response can learn more at AgileBlue.com or speak with an AgileBlue security expert.
About AgileBlue
AgileBlue is an AI-native Security Operations (SecOps) platform that autonomously detects, investigates, and responds to cyber threats across cloud, network, and endpoint environments. Built for today’s speed and complexity, AgileBlue combines intelligent automation with 24/7 SOC experts to deliver non-stop protection and trusted partnership.
