Anvilogic's Blueprints and Federated Search automate SOC workflows across existing tools without data centralization. Live demos at Black Hat USA 2026.
Anvilogic on Thursday made its Blueprints automation tool and a new Federated Search experience generally available. The company pitches the updates as a way for security teams to automate workflows across the tools and data they already own, without moving data to a central repository or replacing existing infrastructure.
Security data now lives in more places than ever, CEO Karthik Kannan said in a statement. The platform aims to automate the daily work of the security operations center across the infrastructure organizations already have. Blueprints brings AI-powered agentic automation to every SOC workflow, he said, while the Federated Search experience, powered by Anvilogic Compute, makes more of an organization's security data available to those workflows.
The company plans to demo the new capabilities at Black Hat USA 2026, running August 1-6 at the Mandalay Bay Convention Center in Las Vegas.
Blueprints captures how each security team operates and turns that expertise into repeatable AI workflows with human oversight. Every organization has its own approval processes, investigation methods, and operational knowledge, Kannan said. Rather than forcing every SOC into the same workflow, Blueprints preserves those processes while allowing AI to execute them consistently at scale.
New enterprise capabilities in the general availability release include governed workflow templates that let a SOC team's expertise become a process any analyst can run. The company said teams using Blueprints can onboard data faster, investigate more alerts, close more coverage gaps, and scale without adding headcount.
Federated Search across data sources
Organizations no longer keep all of their security data in one place, the company said. Security operations need to work across SIEMs, data lakes, and cloud storage without forcing organizations to centralize everything first.
Anvilogic's new Federated Search experience gives security teams a single place to search across every connected data source. Powered by Anvilogic Compute, it extends that search to cloud storage, making more security data available for detection, investigation, and automation without moving it into a SIEM or data lake.
Customers can continue using Splunk, Microsoft Sentinel, Snowflake, Databricks, Amazon S3, Azure Blob Storage, Google Cloud Storage, and other existing platforms while modernizing security operations on their own timeline, Chief Product Officer Mackenzie Kyle said in the release.
"Customers shouldn't have to choose between controlling infrastructure costs and expanding security operations," Kyle said. "The new Federated Search experience, powered by Anvilogic Compute, makes more of a customer's existing security data available to the Anvilogic Agentic SecOps Platform, while Blueprints turns that data into governed, repeatable AI workflows."
The company emphasized that the platform works across the infrastructure customers already own, rather than requiring data centralization. Anvilogic integrates with any data store, including legacy SIEMs, data lakes, and object stores, and with downstream ticketing and case management systems.
Market context
Anvilogic's announcement comes as enterprise security teams face growing data volumes, alert volumes, and attack complexity. The company said valuable data goes unsearched, detections go unbuilt, and investigations stall when analysts cannot keep pace manually.
Microsoft, which offers Microsoft Sentinel as a competing SIEM, saw its stock rise 1.83% to $396.21 on Thursday, according to MSFT stock page data. The Anvilogic platform integrates with Sentinel, meaning the new capabilities could complement rather than directly compete with Microsoft's offering for some customers.
Anvilogic is a private company based in Palo Alto, California. It serves Fortune 1000 companies across financial services, technology, and critical infrastructure. The company's platform automates daily manual SOC functions spanning data onboarding, detection, and investigation, while letting customers keep their data where it makes sense.
Kannan said the platform shifts repetitive security operations from people to automated AI workflows. Instead of AI just assisting analysts with individual tasks, purpose-built AI agents execute the everyday work of the SOC, driven by the orchestrator agent Blueprints, while humans stay in control of the decisions that matter.
The company plans to demonstrate Blueprints and Federated Search at Black Hat USA 2026 in Booth 5724. No pricing details were disclosed in the release.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.