After SOAR

Swimlane adds intelligent routing to its AI SOC

19 August 2026

Swimlane announced on 2026-08-19 that its AI SOC now routes each incoming alert to one of three paths: deterministic automation, AI-assisted investigation, or an investigation run entirely by AI agents. The same Turbine release lets customers pick a specific AWS Bedrock model for each Hero AI agent, and says validated AI investigations can be turned into playbooks over time (Swimlane press release, read 2026-11-03).

Swimlane says routing can cut investigation processing costs by up to 90 percent against using AI for every alert, and gives one healthcare customer investigating about 180 threats a day as the example. That is a vendor claim from one customer, with no method and no measurer named. It says the capabilities are generally available now.

Source: swimlane.com, read 2026-11-03.

What it changes for a buyer

Swimlane's AI row stays at 7.0, capped because every source for it is Swimlane's own. The 90 percent figure is not scored. Test the routing rules on your own alert mix before you count the saving.

Other dispatches

More notes in Dispatches. To see the platforms side by side, start from the card.