Trellix Wise for Private Cloud Runs AI Security Operations Inside Customer Environments

David Soto, Trellix’s chief information security officer, said those holdouts “aren’t resistant to the technology, but to the tradeoffs.” He described the tradeoffs as sending sensitive security telemetry to a public cloud, “absorbing unpredictable token costs” and working without visibility into how AI decisions are made.

Trellix said every outcome from the private cloud edition comes with a confidence level, and each one is explained in plain language so it can be audited for governance purposes. Customers are not billed by the token. Trellix Wise first appeared in May 2024 as generative AI investigation features in the company’s extended detection and response platform.

Soto’s comments came from the latest edition of Trellix’s “Mind of the CISO” report, released alongside the product. Research firm Vanson Bourne Ltd. polled 600 chief information security officers on insider risk in August and September. One recommendation in the report is that companies consider on-premises or private cloud deployments for sensitive workloads so data stays inside their own security boundary.

Respondents told Vanson Bourne that AI-driven or autonomous systems were behind 28% of the insider incidents they dealt with over the past year, on average. Ninety-nine percent still expect AI and automation to be critical or very important to managing insider risk within two years. When asked what stands in the way, 40% named a lack of trust in automated decision-making.

The average organization in the survey took seven hours to spot an insider incident. Responding took eight more hours, a window Soto described as an invitation to attackers who use AI to speed up every stage of an attack.

Companies that do not govern AI agents with the same rigor they apply to human employees are “operating with an unmonitored insider at scale,” Soto argued in the report.

The report also found that 98% of respondents see a role for governments or regulators in helping them manage insider risk. One U.S. chief information security officer at a financial operations provider told interviewers that fragmented state rules were “a nightmare” and called for a “unified matrix of regulations” so companies can “safely use AI for legitimate business purposes.”

Trellix, formally named Musarubra US LLC, was formed in 2022 by Symphony Technology Group following STG’s acquisition of McAfee Enterprise and FireEye.

Editor's Summary

Trellix launched Wise for Private Cloud, allowing enterprises to run AI security operations inside their own environments with auditable outcomes and no token-based billing. The launch came with a Vanson Bourne survey of 600 CISOs showing that 28% of insider incidents involved AI-driven or autonomous systems and that 40% cited a lack of trust in automated decision-making. The survey also found wide support for regulatory help and long detection and response times.