August 19, 2026 – Cleveland, OH
AgileBlue has rebuilt the reasoning engine behind its Sapphire AI Assistant, replacing a sequential classification pipeline with an agentic, tool use architecture, the same approach powering the current generation of extensible AI assistants’ industry wide. Instead of routing each question through a fixed chain of narrow classification steps, Sapphire now reasons about what it needs, decides which of its verified data queries to run, and can pull from multiple queries in a single turn to answer one complete question.
The rebuild was designed around two constraints that don’t bend for a security product:
- Sapphire never writes or modifies a data query itself; every lookup runs through a predefined, human authored query.
- Every result is scoped to the requesting customer’s organization automatically, enforced outside the model’s control. This upgrade adds reasoning flexibility without touching either guarantee.
What this looks like in practice:
- Multi-part questions, one answer. “Which devices have the most alerts, and do any of them have open cases?” is resolved in a single response, composed from multiple underlying queries.
- Multiple, separate conversations at once. Customers can now run more than one distinct chat with Sapphire at the same time, starting a new conversation and picking back up on an earlier one without losing either thread. This was not possible before
- Natural phrasing. Dates, severity levels, and device or case names can be entered the way people actually talk. Sapphire resolves the specifics rather than requiring exact matches.
- Follow ups that hold context. “What about last month?” or “tell me more about those” resolves against what was just discussed.
- Grounded answers only. Every response is built from predefined, verified queries against a customer’s own data. If a question falls outside what Sapphire can verify, it says so clearly and hands off to live support instead of guessing.
- Help center answers in the same conversation. Product and how-to questions surface alongside data questions in one chat.
This is a foundational shift in how Sapphire works, not a features on top update. It’s built to scale to hundreds of predefined queries across AgileBlue’s data domains as the platform grows, without the accuracy degrading the way a fixed classification chain would.
For more information or to request a personalized demo, visit agileblue.com/contact-us.
About AgileBlue AgileBlue is an AI-native Security Operations (SecOps) platform that autonomously detects, investigates, and responds to cyber threats across cloud, network, and endpoint environments. Built for today’s speed and complexity, AgileBlue combines intelligent automation with 24/7 SOC experts to deliver non-stop protection and trusted partnership.
