A show floor full of AI claims, and one company arriving with customer-supplied numbers to put behind its own. Lisa Liu explains what 19 minutes per analyst hour, 1.5 reclaimed full-time analysts, and 99.7 percent agreement with human analysts actually change inside a security operation.
Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber, says the AI noise has been running since RSAC Conference, and that what separates vendors now is whether they can back their claims with data their customers gave them. She came to Black Hat USA 2026 with figures on Agentic Auto Triage.
The numbers she cites: up to 19 minutes saved per hour per analyst, up to 1.5 full-time analysts per year, and 99.7 percent agreement with the human analyst. Liu treats the accuracy figure as the one carrying the weight. Reacting at machine speed matters only if the verdicts hold, and she describes security as a low trust industry where the burden of proof sits with the vendor.
Stellar Cyber is a security operations platform purpose built for MSPs and lean enterprise teams, offering full cycle, full visibility, unified security operations. Liu says the company builds its business logic around the customer pain point, maximizing the efficiency of the resources a team already has. With alerts climbing as attackers pick up the same AI tools as everyone else, she argues that hiring through the volume is out of reach for most teams.
So where does reclaimed time go? Liu says that call belongs to the customer. Reported answers include customer relations, other facets of the job, and expanded roles that analysts never had time for. There is a learning effect too. Analysts can see every step of the decision making behind an AI conclusion and draw lessons from it.
For managed service providers, Liu says partner analysts deliver more customized services and take in feedback more productively once their schedules loosen up. Where partners serve very different market segments, platform flexibility carries the load, along with full visibility and automation at machine speed. She also hears a shift on the floor: running many separate vendors creates expensive overlap and leaves gaps, and a single platform approach is becoming industry standard.
What comes next? Liu places the industry in a proof stage. More validation is necessary, claims about the Agentic SOC keep arriving, and backing those up with more numbers is a large part of moving forward. AI has been part of the Stellar Cyber logic since the company was founded over 10 years ago, and she says that has not changed.
This is a Brand Briefing. A Brand Briefing is an on-location conversation recorded on site at Black Hat USA 2026, putting a spotlight on the guest and their company and pairing it with the editorial reach of ITSPmagazine. Learn more: https://www.studioc60.com/performance/#briefing
GUEST
Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber
LinkedIn: https://www.linkedin.com/in/lisaaliu/
RESOURCES
Black Hat USA 2026 event coverage: https://www.itspmagazine.com/black-hat-usa-2026-cybersecurity-event-coverage-in-las-vegas
Stellar Cyber: https://stellarcyber.ai/
Stellar Cyber and M-Theory at Black Hat USA 2026: https://www.businesswire.com/news/home/20260728715036/en/Stellar-Cyber-and-M-Theory-to-Demo-Proof-Based-AI-SOC-at-Black-Hat-USA-2026
Stellar Cyber on LinkedIn: https://www.linkedin.com/company/stellarcyber
Are you interested in telling your story?
▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full
▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight
▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight
▶︎ Get your own Brand Briefing at an upcoming event: https://www.studioc60.com/buy-brand-briefings
KEYWORDS
lisa liu, stellar cyber, sean martin, brand briefing, brand story, brand marketing, marketing podcast, black hat usa 2026, agentic auto triage, agentic soc, alert fatigue, security operations platform, mssp, managed security service provider, soc analyst productivity, ai in security operations, autonomous soc, siem replacement, analyst burnout, human in the loop ai
Stellar Cyber Puts Numbers Behind Agentic Auto Triage and Hands Analysts 19 Minutes Back Every Hour | A Brand Briefing at Black Hat USA 2026 with Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber | Hosted by Sean Martin
[00:00:00] Sean Martin: All right, Lisa.
[00:00:10] Lisa Liu: Hi.
[00:00:10] Sean Martin: Here we are. We're at Black Hat, Hacker Summer Camp.
[00:00:14] Lisa Liu: Yes.
[00:00:15] Sean Martin: I don't feel like there's a bunch of camping going on here. It's too noisy to camp sleep.
[00:00:21] Lisa Liu: There's a lot going on. You're not really convening with nature out here.
[00:00:25] Sean Martin: You don't want to be outside in the heat either. It's nice to be cool in here. Still kind of warm with all the people. A lot of
[00:00:33] Lisa Liu: chatter.
[00:00:34] Sean Martin: Nice blue background. The entire SOC flying by on the demo screen over here, which you probably can't see. All the cool stuff you've been working on. So what's going on?
[00:00:44] Lisa Liu: A lot. We've been hearing a lot of AI noise since RSAC Conference, but now we're hearing some differentiators, and we're really excited to be presenting at Black Hat this year. Some new data that we have about our Agentic Auto Triage, some numbers that our customers have provided to back up our claims about how effective our technology is and how much it actually does help the productivity of the human analyst.
[00:01:09] Sean Martin: Love it. So before we get into all the new data that you have, a few words about your role, and maybe an elevator pitch, an overview of Stellar Cyber, so we have that context as we dig in.
[00:01:20] Lisa Liu: Yeah. So I'm Lisa. I'm the corporate marketing and communications manager here at Stellar Cyber. And we are a security operations platform, and I'm sure you can see behind me, that we're purpose built for MSPs and lean enterprise teams. And we offer full cycle, full visibility, unified security operations.
[00:01:40] Sean Martin: And purpose built for teams that are stretched with resources, right? So tell me a little bit about what that means, because I think oftentimes things are built for the large enterprise and it doesn't scale down, but this is still purposeful for the smaller orgs, right?
[00:01:57] Lisa Liu: Yeah. Because we've always based our business logic around what the key pain point of the customer is. What our solution tries to do is to maximize the efficiency of every single resource you already have at your disposal, without requiring that you acquire much more manpower in order to meet the challenges of an AI-powered future. So we're seeing alerts increase exponentially in this day and age, now that hackers have the same AI tools as everyone else. And to deal with that, just adding more people is not a realistic solution for most teams. So bridging that gap has been where we excel.
[00:02:39] Sean Martin: So the Agentic Auto Triage?
[00:02:42] Lisa Liu: Yes.
[00:02:42] Sean Martin: Driven by data. What is this all about?
[00:02:45] Lisa Liu: So Agentic Auto Triage is meant to help you react with machine speed to threats happening at machine speed. And the key with auto triage is that it has to have a certain level of accuracy, because it is a low trust industry, as we've talked about before, and it takes a lot of data to prove that your technology does what you say it does, instead of just being part of the background AI noise, with everyone saying kind of the same thing. So having these numbers really does validate your approach as opposed to others. And we have numbers to prove that we save up to 19 minutes per hour per analyst, which is a very significant margin.
[00:03:27] Sean Martin: Nearly a third.
[00:03:28] Lisa Liu: Exactly. And it will save you up to 1.5 full-time analysts per year, which is absolutely not a trivial difference. And our auto triage has been proven to have 99.7% agreement with the human analyst. So that's about as close to perfect as you'll get.
[00:03:47] Sean Martin: So the same results in parallel paths.
[00:03:49] Lisa Liu: Yes.
[00:03:50] Sean Martin: A third of the time, or a third of the time saved, basically.
[00:03:54] Lisa Liu: Yes.
[00:03:55] Sean Martin: Yeah.
[00:03:55] Lisa Liu: So that you can pivot your analysts to do other things, other sides of the business, and to really change your growth.
[00:04:03] Sean Martin: So what are organizations doing with the time the analysts have saved? Where are they redeploying them and getting more value out of their teams?
[00:04:14] Lisa Liu: Well, it's up to them, but a lot of them have reported that analysts can deal more with customer relations, that they can explore other facets of their job, that they can expand their roles in ways that they never had time to do before. And it just gives them a lot more flexibility to change the role of the human analyst in ways that weren't possible before, because they were dealing with just so many alerts.
[00:04:36] Sean Martin: And in terms of skills and training, how does this fit into what they already know? How can they use the solution to actually improve and enhance things that they really care about, like analyzing threats and hunting for things and whatnot?
[00:04:56] Lisa Liu: Yeah, I think it lets them take control of their role in a much more creative way, because they're able to not only have all this time back, but also learn from the decision making processes of the AI capabilities that they now have. They're able to see every step of the decision making that goes into an AI conclusion. And from there draw lessons that they can use to improve and level up themselves.
[00:05:23] Sean Martin: So what are some of the security operations managers, the SOC leaders, how are they perhaps changing the way they manage their team? Like reducing burnout and things like that. Obviously time saved kind of eliminates some of the heavy repetitive work. So how do SOC managers benefit from what you're working
[00:05:46] Lisa Liu: on? I think the entire outlook has changed. Once you've dealt with the pain point that analysts have faced since the dawn of time, which is alert fatigue, then you're able to think outside of the box in terms of what else your human analysts are capable of, and how they can help grow your business in different ways. How they can start addressing other challenges when they're not just dealing with the immediate burden of all these alerts.
[00:06:11] Sean Martin: So looking a little into the future, is there kind of a next bottleneck that you are seeing coming? Because if you can get through all the alerts, then it's dealing with the incidents, right? Responding and things like that.
[00:06:28] Lisa Liu: Yeah, I think certainly we're still in a proof stage, I would say. In the future, definitely more validation is necessary. And we're still hearing a lot of claims all across the floor, all throughout the industry, about what the Agentic SOC really is capable of. And I think backing that up with more numbers, more anecdotal evidence, that's going to be a large part of moving forward.
[00:06:55] Sean Martin: Let's talk about the service providers, managed security service providers, where they're managing environments for many clients. Not an easy task, certainly not an easy environment to get set up and manage either. So how do you help them actually succeed, where they can actually deliver results, gain value in their own business at the same time?
[00:07:22] Lisa Liu: Well, I think it goes back to time saved, right? We've heard direct feedback from our MSSP partners who have said that their analysts are able to deliver more customized services to their customers, are able to receive feedback more productively, because now they have much more flexibility in their schedules. They're less overwhelmed with the immediate threat and with just the noise of everyday tasks, and they're able to think more creatively about how to meet the specific needs of every customer, to adapt to every landscape that is demanded of them.
[00:07:57] Sean Martin: So back to the triage, you said you have a bunch of data. Is it available yet?
[00:08:03] Lisa Liu: Yes. The PR is live on our website, and we are handing out pamphlets here at our booth. And we are happy to provide a demo and provide more numbers to anyone who's interested.
[00:08:15] Sean Martin: Any other highlight you want to share?
[00:08:18] Lisa Liu: We're just very excited to continue proving that our vision works. One thing we've been saying is that AI has been part of our logic since the very beginning, when we were founded over 10 years ago. And it's just really exciting to be able to show that we've always been at the top of the market and leading the way, and that hasn't changed.
[00:08:36] Sean Martin: I love it. And as we begin to wrap here, maybe what's kind of the vibe of the folks that are coming through? You probably get analysts, you probably get security leaders. How many CISOs come by the booth? But what's the kind of general vibe as they hear the story that you have to share?
[00:08:57] Lisa Liu: I think there's a vibe of relief. I think as soon as you mention alert fatigue, everybody knows immediately the pain that you're talking about. They know exactly how much that's been exacerbated by AI, and how desperately they need an efficient solution that doesn't require immense resources to scale and to augment all the vulnerabilities that they're now realizing are true vulnerabilities. So for example, how SIEMs are no longer sufficient, and how they need identity, cloud, endpoint, network, all these other vulnerabilities covered. So I think hearing that validation has been really exciting. A lot of people are realizing that they want one solution to address all of their pain points, and they're realizing that juggling a bunch of different vendors is no longer really a viable way to move forward. And those multiple vendors create a lot of overlap that's expensive, and also gaps that aren't addressed. So a single platform approach really is becoming industry standard, and is what a lot of people are looking for. So that's another thing that I've heard from people walking by.
[00:10:07] Sean Martin: So describe the platform. What are the elements, and how does that fit in?
[00:10:12] Lisa Liu: Yeah. So the goal of our platform has always been simple integration for the people who adopt it, which means that we offer hundreds of integrations for the different tools that you currently use. So there's seamless integration, seamless transition from one tool to our platform. And also there's no need to burn existing bridges or to replace existing tools. And that really is something that people are learning is becoming more necessary when the playbook is changing, when they're needing to scale faster without this awkward transition phase, when they can't be left vulnerable, things like that.
[00:10:45] Sean Martin: Right. From an MSSP perspective, I don't know if you have insight into it, but I can envision where there might be a certain stack on the platform for a particular segment of the market, like financial services or healthcare, maybe a different stack for manufacturing, depending on the types of environments we're dealing with or the clients that we're trying to serve. I don't know if you have any insights or thoughts on that.
[00:11:11] Lisa Liu: Well, that's definitely a challenge that a lot of our partners face, and I think in that case, flexibility is a huge part of it. And that's when you can't have every analyst working the job of 10 analysts, right? You need a tool to help them bridge that gap. And that's where a flexible platform that gives them full visibility, that automates things at machine speed, allows them to really be able to give customized service, and also with their time back, be able to get more feedback and respond more effectively. That's some of the best feedback we've gotten about our Agentic Auto Triage from our existing customers, is that their analysts are finding their jobs a lot easier.
[00:11:51] Sean Martin: Right. And do you have a favorite quote from a partner or from a customer?
[00:11:58] Lisa Liu: Yes. Actually yesterday we heard that they are dealing with almost three times the number of alerts. And I would like to, let me email you with the exact numbers, because it's pretty impressive. But it was a factor of multiple factors. They were responding to multiple times more alerts a day, which is just something that was unthinkable even a few months ago, let alone a few years ago. So the strides that we've made are certainly significant.
[00:12:31] Sean Martin: Well, Lisa, so good to chat with you.
[00:12:33] Lisa Liu: So nice to chat with you. Keep up the good
[00:12:34] Sean Martin: work. Yeah, all the great innovations. You're a great spokesperson.
[00:12:38] Lisa Liu: Thank you so much.
[00:12:39] Sean Martin: Stellar Cyber, stellarcyber.ai. Connect with Lisa. Connect with Steven. Connect with the team on LinkedIn. stellarcyber.ai as well on the website. And stay tuned for more here from Black Hat on ITSPmagazine.