Prophet Security announced the general availability of AI Detection Engineer, a new product within the Prophet Agentic AI SOC Platform that automates one of cybersecurity’s most understaffed and time-intensive disciplines: detection engineering.
As cyber threats evolve faster than security teams can manually respond, organizations increasingly struggle to build, validate, tune, and maintain the detections needed to identify modern attacks. AI Detection Engineer continuously analyzes an organization’s investigations, threat hunting results, detection performance, and telemetry to identify coverage gaps, author new detections, optimize existing rules, and prioritize the improvements that will have the greatest impact on reducing organizational risk.
Unlike traditional coverage dashboards that simply report which detection rules are enabled, AI Detection Engineer measures real-world detection effectiveness by analyzing completed investigations. The result is a continuously updated view of which MITRE ATT&CK techniques are effectively covered, which detections have gone quiet, and where dangerous blind spots remain.
“AI Detection Engineer gave us a real view of where our coverage actually stood, tuned our rules that were contributing to false positive noise, and proposed new detections it had already backtested against our own investigation data. That’s work we simply didn’t have the people or hours to do ourselves, and we decide how much autonomy to give it along the way,” said Lisa Brooks, Director, Information Security – Security Operations & Engineering at ETS
From Reactive Detection to Continuous Detection Engineering
Detection engineering has become one of the fastest-growing priorities for security operations teams, yet few organizations have the specialized staff needed to continuously improve detection coverage. Detection engineers are routinely pulled into alert triage and incident response, leaving little time to analyze detection quality, tune existing rules, or identify new attack techniques before adversaries exploit them.
AI Detection Engineer continuously performs this work in the background, allowing security teams to wake up each day to a prioritized list of validated recommendations rather than months of untuned rules and unaddressed gaps.
Working from an organization’s own investigation history, AI Detection Engineer:
● Builds a live MITRE ATT&CK coverage map based on investigation outcomes rather than static rule inventories.
● Identifies detection coverage gaps and telemetry blind spots across the environment.
● Authors new detections using the organization’s existing security stack.
● Tunes existing detection rules to reduce false positives and analyst fatigue.
● Backtests every recommendation against historical data before proposing implementation.
● Maintains version control, documentation, audit trails, and rollback capabilities for every change.
Rather than replacing analysts, AI Detection Engineer automates the repetitive engineering work that most security teams lack the time and staffing to complete consistently.
AI That Earns Trust Through Transparency
Prophet designed AI Detection Engineer around a simple principle: organizations should determine how much autonomy AI receives.
Every recommendation includes supporting investigation evidence, an explanation of why the recommendation was generated, confidence scoring, and historical backtesting results before any change is implemented. Organizations can begin in Prophet’s default review-and-approve mode or progressively allow greater automation as confidence grows.
Every recommendation remains fully documented, version controlled, and reversible, giving security teams the transparency and governance needed to adopt autonomous security operations responsibly.
“Security teams have known for years that detection engineering is essential, but they haven’t had the people or the time to do it continuously,” said Grant Oviatt, Co-Founder and Vice President of Product at Prophet Security. “AI Detection Engineer turns detection engineering from an occasional project into a continuous operational capability. Because Prophet AI performs the investigations, it understands which detections matter most, which gaps create the greatest risk, and where teams can make the biggest improvements. Organizations remain in complete control while AI handles the work that never seems to fit into the day.”
Why This Matters
AI Detection Engineer extends the Prophet Agentic AI SOC Platform across the full security operations lifecycle, allowing organizations to automate:
● Alert triage
● Security investigations
● Threat hunting
● Detection engineering
● Continuous detection optimization
Together, these capabilities create an AI SOC Platform that not only investigates today’s alerts but continuously improves tomorrow’s detection coverage.
