Exabeam Turns Nova AI Agent Into Persistent Investigator, Adds AI Features to LogRhythm

Nova AI, the agent Exabeam first introduced in April 2025, now acts as a persistent investigator across the whole platform. As an incident unfolds, the agent collects context and entity profiles and runs its own secondary searches. Related Cases, released in early access in July, automatically groups connected incidents so that analysts see the wider picture sooner. Steve Wilson, Exabeam's chief AI and product officer, said the future security operations center will be defined "by how effectively people and AI agents work together."

Among Nova AI's users is E-Global, a Mexican payment processor. Eduardo Sulvarán Velázquez, subdirector of cyber risk management at the company, said the agent has helped its analysts prioritize cases, adding that AI can speed up investigations "without removing human judgment from the process."

Two other cloud additions center on Anthropic PBC's Claude. A new Guided Investigation Skills Pack for Claude brings Exabeam's investigation workflows into command-line AI agents, where analysts can triage alerts and run investigations through natural-language commands. Exabeam said it plans a series of skills for the Exabeam Agent Skills Marketplace, beginning with this pack.

Claude Enterprise customers receive a deeper integration: prompts, tool calls and actions from those deployments now land on a single timeline, and Exabeam runs event-time analysis and behavior-based correlation over that record to catch rogue agents and behavioral drift.

The remainder of the cloud release covers reporting. Executive Digest packages security metrics in a form intended for the boardroom, while a separate addition, Outcomes Navigator Overrides, lets teams tailor risk scoring, with compliance metrics broken out for each business unit.

The LogRhythm update targets organizations that keep infrastructure, data or AI workloads on-premises. New out-of-the-box collectors feed activity from OpenAI Group PBC's ChatGPT, Google LLC's Gemini and GitHub Inc.'s Copilot into LogRhythm Intelligence Analytics. Sensitive data stays inside the customer's environment when teams query and triage it through a new community Model Context Protocol server that works with local generative AI models.

Under the hood, LogRhythm has moved from Elasticsearch to OpenSearch through an in-place migration that Exabeam said improves speed and scale. That base also supports a new self-service reporting engine with AI governance and audit-ready compliance reports.

The release carries new open-source tools published through the Open Agent and AI Security Community that Exabeam founded. The main addition is an Agentic SOC Skill Suite, which brings New-Scale skills to Claude Code and OpenAI's Codex, with one community marketplace handling plugins for both and installing them with a single command. Praxen, the agent verification tool Exabeam open-sourced in June, gains new Thinking Modes and evidence-committed scoring that ties each finding and score more directly to its source material.