AI agent
An AI agent is software that chooses its own steps toward a goal using a language model and tools. In security operations it may triage an alert, gather evidence or draft a playbook. What an agent can build and what it can decide are different questions, and vendors answer them unevenly.
What AI agent means
Two kinds appear in these products. Builder agents write automation for people to review. Investigator agents work cases. Splunk's notes describe the first kind and say so.
Ask for the agent's permissions, its limits and what is logged. A number about accuracy is a claim until the sample and the measurer are named.
AI agent in Splunk SOAR's own words
The Splunk SOAR Automation Builder agent understands playbooks and builds them, and the release notes say it runs in Cloud only and needs Splunk Enterprise Security 8.6 or later. Splunk SOAR documentation, read 2026-11-03