Grabado en la plataforma activa de AI SOAR. Editado con IA, con una narración de IA.
Solo se listan los videos ya publicados, en el orden de la serie.
Parte 1 · Command Center
AI SOAR Command Center: your whole security posture on one screen
Command Center gives operations one live overview instead of a chain of emails. It brings alert pressure, open risk, active missions, signals, findings, backlog, and response work together, with drill-down coverage and customer portal operations one click away.
Parte 2 · Launchpad
AI SOAR Launchpad: move from scan to a governed agent workflow
Launchpad guides an agent from scan through workflow rules, build, testing, deployment, and tracking. It uses approved site and boundary context, checks certification and tool readiness, and holds deployment until the checks pass.
Parte 3 · Unified Findings
AI SOAR Unified Findings: bring security results into one list
Unified Findings normalizes results from SAST, DAST, network scans, and team assessments in one list. Each finding keeps its source, timing, provenance, rationale, and history, with filters for severity, source, or executor.
Parte 4 · Profiles
AI SOAR Profiles: keep every system and boundary connected
Profiles bring a system's customer, facilities, contacts, boundaries, connections, inventory, agents, interconnections, and architecture into one view. Readiness checks show what needs attention while unknown or unverified items remain explicit.
Parte 5 · Inventory
AI SOAR Inventory: see every asset before you protect it
Inventory records each asset's type, version, IP address, boundary assignment, discovery source, and STIG source. Add assets manually, import CSV or CPE XML, or start discovery, then see how each asset was found and assigned.
Parte 6 · Customer Operations
AI SOAR Customer Operations: manage every authorized workspace
Customer Operations keeps the MSSP customer registry organized across profiles and endpoints. Its scope roll-up and linked pages make customers, locations, facilities, boundaries, contacts, roles, and status easy to review.
Parte 7 · Enterprise Operations Catalog
AI SOAR Enterprise Operations Catalog: know what runs before it runs
Enterprise Operations Catalog keeps models, tools, connectors, agents, and tenant branding in one shared view. Review deployment, cost, usage, benchmarks, supply-chain and license records, plus readiness before anything runs.
Parte 8 · Boundaries
AI SOAR Boundaries: keep authorization scope current
Boundaries models authorization and assessment boundaries, tracks FISMA systems, and ties assets to the boundary they belong to. Each boundary keeps its own rules and scope so the picture stays current as systems change.
Parte 9 · Architecture Diagrams
AI SOAR Architecture Diagrams: keep your system picture current
Architecture Diagrams generates system diagrams from asset inventory and network scan data, so the picture can match what is deployed. Review status, ownership, components, and mapped controls, and flag outdated diagrams before submission.
Parte 10 · Incident Response
AI SOAR Incident Response: preserve the proof of what happened
Incident Response organizes evidence around govern, identify, protect, detect, respond, and recover. Timestamped records connect sensors, tools, agents, and incidents, while triage, routine work, swarm runs, and decisions stay documented.
Parte 11 · POA&M
AI SOAR POA&M: turn findings into provable remediation
POA&M builds entries from scan and assessment findings instead of losing them in a spreadsheet. Track open items, severity, duplicates, accepted risk, and remediation verification, then export CSV or an authorization-package spreadsheet.
Parte 12 · Agent Hub
AI SOAR Agent Hub: govern your AI agents like a real team
Agent Hub lets teams build, clone, and manage AI agents with a manifest for mission, permissions, tools, and guardrails. Certify before production, bring outside agents under the same controls, and use a kill switch when needed.
Parte 13 · Workforce
AI SOAR Workforce: align governed agents to cyber work roles
Workforce maps governed AI agents to DoD Cyber Workforce Framework work roles across IT, cybersecurity, intelligence, data, AI, and software engineering. Knowledge, skills, abilities, tools, and permissions make each agent's qualifications visible alongside workforce planning.
Parte 14 · Agent Tools
AI SOAR Agent Tools: verify what every agent can use
Agent Tools provides the governed registry for built-in tools, connectors, AI-assisted tools, and lab simulations. Readiness depends on binary and handler checks, while configuration needs and execution evidence remain visible.
Parte 15 · Agent Mission Trace
AI SOAR Agent Mission Trace: explain every agent action
Agent Mission Trace records each task, tool call, input, output, finding, and timing. Follow the live audit log, replay completed runs, or export the trace so auditors have a complete record.
Parte 16 · Agent Verification
AI SOAR Agent Verification: test agents before live missions
Agent Verification checks skills, tool health, and permissions before an agent takes a mission. Tiered gates, rubric scoring, training tickets, and explainable fit scores show why an assignment is ready or blocked.
Parte 17 · SWARM Routing Ledger
AI SOAR SWARM Routing Ledger: show why each task was assigned
SWARM Routing Ledger records why a task was dispatched, blocked, and assigned to a particular agent. Review selection rationale, fit scores, confidence, tools, health-gate alerts, and the persisted audit trail.
Parte 18 · Agent Remediation Hub
AI SOAR Agent Remediation Hub: make agent quality visible
Agent Remediation Hub tracks quality uplift across the agent fleet and separates blocked, assessed, and certified work. Preflights, benchmarks, and human review happen before an agent earns a grade, with distribution showing where the fleet stands.
Parte 19 · Semantic Grounding
AI SOAR Semantic Grounding: connect claims to evidence
Semantic Grounding links tools, agents, findings, evidence, and reports in a tenant-scoped truth layer. Evidence references, hashes, source, observation time, and scope stay attached, while contradictions remain visible until resolved.
Parte 20 · AI Asset Inventory
AI SOAR AI Asset Inventory: bring shadow AI into view
AI Asset Inventory tracks AI systems and flags assets that are unregistered, unowned, or overdue for attestation. Each entry shows its owner, autonomy, risk, and registration status, with timestamped Markdown or CSV export.
Parte 21 · DRM Usage
AI SOAR DRM Usage: see AI usage and cost in one place
DRM Usage brings API calls, tokens, cost, users, and agents into one view. Transaction detail and customer metering break usage down by operation, tokens in and out, latency, cost, devices, and cap verdict.
Parte 22 · Human Interaction Threats
AI SOAR Human Interaction Threats: detect attacks aimed at people
Human Interaction Threats evaluates phishing links, scam messages, QR payloads, SMS fraud, and attempts to manipulate people or AI prompts. Signals from browsers, email, SMS, endpoints, and the AI gateway receive verdicts that name tactics such as urgency or credential harvesting.
Parte 23 · Cloud Security
AI SOAR Cloud Security: bring multi-cloud signals together
Cloud Security brings AWS Security Hub, Azure Defender, Google Security Command Center, Prowler, and ScoutSuite data into one view. Drift alerts share one queue, and the module can run natively in air-gapped environments.
Parte 24 · SOC Comms
AI SOAR SOC Comms: route the right incident message
SOC Comms routes escalation procedures by severity and follows up when nobody acknowledges. Platform findings arrive with remediation guidance, helping the right people receive the right message during an incident.
Parte 25 · Digital Twin
AI SOAR Digital Twin: test attacks without touching live systems
Digital Twin simulates attacks against replicas of enterprise, OT, and multi-cloud environments without touching live systems. Choose a scenario, twin, and swarm strategy, then review modeled detection and response results.
Parte 26 · Deception
AI SOAR Deception: make lateral movement easier to catch
Deception places honeypots, honey credentials, honey files, and tokens across an environment. When one is touched, response rules can block a source IP, reset credentials, and trigger an incident playbook to help catch lateral movement.
Parte 27 · Reports
AI SOAR Reports: give leaders the story and teams the detail
Reports turns existing data into leader summaries and remediation detail. Choose the report type, format, branding, and modules, preview the available data, and keep testing data out unless you include it.
Parte 28 · Health (HIPAA)
AI SOAR Health HIPAA: make safeguards visible before audits
Health HIPAA guides a journey across the Security Rule, Privacy Rule, HITECH, and FDA 21 CFR Part 11. Coverage rolls up to findings, reports, and POA&M, while evidence remains the basis for showing safeguards.
Parte 29 · Government (FISMA)
AI SOAR Government FISMA: connect continuous evidence to oversight
Government FISMA guides a profile through FISMA, NIST SP 800-53, NIST SP 800-171, and DISA STIGs. Coverage connects to findings, reports, and POA&M, with evidence required before anything is marked compliant.
Parte 30 · CMMC 2.0 Wizard
AI SOAR CMMC 2.0 Wizard: connect controls to evidence
CMMC 2.0 Wizard guides Level 2 work by linking controls to evidence from integrated security systems. Its crosswalk connects each control to NIST SP 800-53, helping teams keep an authorization package contract-ready.
Parte 31 · Energy (NERC CIP)
AI SOAR Energy NERC CIP: organize sector compliance work
Energy NERC CIP manages NERC CIP, DOE C2M2, and TSA pipeline security through a guided sector journey. It ties coverage to findings, reports, and POA&M, with evidence required before anything is marked compliant.
Parte 32 · SOC 2 Type II
AI SOAR SOC 2 Type II: show controls over time
SOC 2 Type II tracks the AICPA Trust Services Criteria through a guided journey. Readiness comes from tracked status and rolls up to findings, reports, and POA&M without claiming compliance before evidence exists.
Parte 33 · ISO 42001 AI Mgmt
AI SOAR ISO 42001 AI Mgmt: organize responsible AI work
ISO 42001 AI Mgmt tracks clauses and Annex A controls through a guided journey across ISO/IEC 42001, NIST AI RMF, and ISO 27001. Readiness comes from tracked status and rolls up to findings, reports, and POA&M.
Parte 34 · EU AI Compliance
AI SOAR EU AI Compliance: connect obligations to evidence
EU AI Compliance tracks the EU AI Act, GDPR automated decision-making, NIS2, and DORA through a guided journey. Coverage rolls up to findings, reports, and POA&M for a profile, keeping the work connected.
Parte 35 · Configure Roles
AI SOAR Configure Roles: give each user a focused workspace
Configure Roles lets administrators tailor the sidebar for each type of user. Choose a role preset, then add or remove areas for tools, agents, compliance work, or customer context while server-side authorization remains the source of truth.
Parte 36 · Organizations (MSSP)
AI SOAR Organizations MSSP: keep every client workspace separate
Organizations keeps customers, profiles, endpoints, and status separated across authorized workspaces. Platform owners get a read-only roll-up, while operational actions stay bound to the active work profile and tenant controls.
Parte 37 · Identity & Access
AI SOAR Identity and Access: verify explicitly every time
Identity and Access brings users, roles, tag-based access, connections, API keys, sessions, and tokens into one place. Federation, local identity, password policy, and audit history make explicit verification part of every sign-in.
Parte 38 · Module Documentation
AI SOAR Module Documentation: find the answer inside the app
Module Documentation explains each module's purpose, agents, swarm modes, tools, connectors, API, and reports inside the app. Search or browse by section, jump to setup, and give analysts, auditors, and administrators answers without waiting on support.
Parte 39 · Dashboard
AI SOAR Dashboard: answer 'are we secure right now?' on one screen
The Dashboard opens with a read-only roll-up of customers, profiles, locations, facilities, and resources across an authorized portfolio. Operational AI status shows provider verification, and links jump to the MSSP Dashboard, Enterprise Scale, and Customer Operations.
Parte 40 · Enterprise Scale
AI SOAR Enterprise Scale: see the whole portfolio in one view
Enterprise Scale rolls up customers, profiles, locations, facilities, and resources without breaking tenant boundaries. Cards track corrected issues, token cost by customer, user, agent, and model, and the enterprise readiness gates that are passing.
Parte 41 · Discovery
AI SOAR Discovery: find the assets nobody knew about
Discovery pulls assets from scanners, uploads, SIEM, EDR, cloud, DAST, SAST, and edge endpoints into one workflow. Records are normalized, matched to inventory, and assigned to a customer, site, facility, and boundary, while reminders flag orphan assets.
Parte 42 · Testing Hub
AI SOAR Testing Hub: every security test, one starting point
Testing Hub connects Mission Chain, pen testing, Prompt Workbench, wireless and RF, code analysis, DAST, and AI AppSec, following the NIST SP 800-115 method with OSCAL reporting. Token-saving routing sends each task to the model it needs, so a $5,000 pen test can run for about $0.30.
Parte 43 · Prompt Workbench
AI SOAR Prompt Workbench: governed prompts for repeatable assessments
Prompt Workbench spawns governed CLI prompts for pen tests and assessments, each tied to a session, mission, and connected agent role. Prompts flow through the AI Firewall, model registry, token classification, and custody logger.
Parte 44 · Benchmark Manager
AI SOAR Benchmark Manager: test AI before you trust it
Benchmark Manager runs 112 structured tests across 10 capability dimensions, from adversarial robustness and safety to hallucination detection and tool use. Rubrics, challenge sets, the registry, and run results keep every AI evaluation repeatable.
Parte 45 · Adversarial Testing
AI SOAR Adversarial Testing: attack your AI before adversaries do
Adversarial Testing sends real attack prompts to the target model and scores each response with an LLM judge. Twelve attack packs cover prompt injection, jailbreaks, and tool abuse, and a failed test is always reported as a failure.
Parte 46 · Detection Rules
AI SOAR Detection Rules: author and test Sigma rules in one place
Detection Rules lets your team write Sigma rules in YAML with a required title, log source, and detection condition. Validate, save, and evaluate rules against real logs, and every match becomes a unified finding tagged Sigma.
Parte 47 · Insurance Compliance
AI SOAR Insurance Compliance: insurer cyber rules in one journey
Insurance Compliance tracks the NAIC Insurance Data Security Model Law, NY DFS 23 NYCRR 500, GLBA Safeguards, and the NAIC AI Principles through a guided journey. A live rollup ties coverage to findings, reports, and POA&M before anyone claims compliance.
Parte 48 · Admin Center
AI SOAR Admin Center: platform administration in one place
Admin Center brings users, sessions, audit records, integrations, and customer resources together, with shortcuts to tools, alert routing, API keys, and edge endpoints. The audit log keeps an immutable record of privileged operations.
Parte 49 · Customer Portal
AI SOAR Customer Portal: show customers the security work you do
The Customer Security Portal gives each client a customer-scoped view of findings, tickets, connectors, and agents. Charts break down severity and exposure mix, and the action center lists the findings to work next.
Parte 50 · Portal Configuration
AI SOAR Portal Configuration: decide what each customer sees
Portal Configuration sets up branded, tenant-isolated customer portal accounts with roles, modules, messages, approvals, SAML, and audit visibility. Setup readiness and counters show portal accounts, users, visible modules, and dashboard widgets.
Parte 51 · Facilities
AI SOAR Facilities: tie every asset to a real place
Facilities manages facility-level assets nested under each customer location. Pick a customer to see every facility with its location, name, code, type, and status, under a read-only roll-up of the whole authorized portfolio.
Parte 52 · Boundaries
AI SOAR Boundaries: know exactly what is inside the boundary
The administrative Boundaries page holds the authorization and assessment scopes attached to each customer's system profile. Pick a customer and profile to see every boundary with its type, status, and scope.
Parte 53 · Platform Settings
AI SOAR Platform Settings: set the rules for AI providers
Platform Settings caps how far AI requests for each profile may reach with a provider tier policy, and an allowlist decides which hosts are reachable. Provider management supports cloud APIs, local models, MCP, and bring-your-own-key.
Parte 54 · Test System
AI SOAR Test System: prove the platform works before you rely on it
Test System is the QA home for AI SOAR, with a module QA scope that spans security testing, monitoring, AI agents, automation, inventory, compliance, and supply chain risk. Pen-test pipeline health guards SWARM launch, trace persistence, and report assembly.
Parte 55 · SWARM
AI SOAR SWARM: a self-checked pipeline for agent teams
On the SWARM tab, the Supervisor Agent orchestrates AI-powered incident response. A bounded pipeline self-check validates orchestration, trace persistence, report assembly, allowlist readiness, and scanner binaries without attacking any external target, and report jobs survive application restarts.
Parte 56 · Agent Preflight Ops
AI SOAR Agent Preflight Ops: prove every agent before the mission
Agent Preflight Ops is the admin dashboard for the mission-preflight gate. Runtime preflight checks each agent's tool bindings, credentials, attestations, permissions, and fallbacks, and failures go to Agent Remediation.
Parte 57 · OpenClaw
OpenClaw in AI SOAR: a self-hosted assistant, wired into SOAR
OpenClaw is an open-source, self-hosted AI assistant, and this page shows how it plugs into AI SOAR. Six use cases cover investigations, alert routing, skill-triggered tasks, a mobile copilot, SOC session monitoring, and posture audits with a built-in skill scanner.
Parte 58 · AI-Infra-Guard
AI-Infra-Guard in AI SOAR: red-team the AI stack
AI-Infra-Guard brings an open-source AI red-teaming platform into AI SOAR. Five scan types cover OpenClaw deployments, agent workflows for prompt injection and system prompt leakage, MCP servers and skills, jailbreak evaluation, and AI infrastructure endpoints.
Parte 59 · AI Observability
AI SOAR AI Observability: one place to see and trace your AI
AI Observability brings AI governance, catalog management, and continuous assurance together, with AI Observability, Token Observability, and AI Inventory views. One tab row covers the lifecycle, from enterprise inventory and the AI catalog to governance, AI risk, MLOps, compliance, and safety tests.
Parte 60 · AI Guardrails
AI SOAR AI Guardrails: from frameworks to guardrail policy
AI Guardrails enforces governance policy across AI models, agents, and environments. The Policy Builder starts from frameworks such as the NIST AI RMF, ISO/IEC 42001, the OECD AI Principles, the EU AI Act, and DoD AI Ethics, then auto-maps guardrail policies you can save as a profile.
Parte 61 · AI WAF
AI SOAR AI WAF: a firewall built for AI APIs
AI WAF is a firewall for AI APIs, with OWASP LLM Top 10 protection, data loss prevention, and SOAR integration. Set blocking or monitor-only mode, auto-trigger playbooks on critical events, enforce a token rate limit per API key, and log all traffic.
Parte 62 · AI Firewall
AI SOAR AI Firewall: gateways, policies, and live tests
AI Firewall in AI SOAR configures and monitors AI gateway entry points, DLP policies, prompt controls, and runtime event logs. On the Test tab, Anonymize rewrites a synthetic prompt with stand-in names and maps each original value to the stand-in that replaced it.
Parte 63 · AI Security Assessment
AI SOAR AI Security Assessment: find the gaps before attackers do
AI Security Assessment assesses AI applications against the OWASP Top 10, the NIST AI RMF, and MIT AI Risk frameworks. Gap Analysis scores readiness, module status, tool coverage, and runtime evidence, and shows the highest-risk gaps to close first.
Parte 64 · NVIDIA Platforms
AI SOAR NVIDIA Platforms: specialized AI, one page
NVIDIA AI Platforms collects four NVIDIA integrations in one place: Earth-2 for weather and climate simulation, Nemotron for threat analysis through NVIDIA NIM, Isaac GR00T for physical-security AI, and PersonaPlex for speech-to-speech conversational AI.
Parte 65 · Module Setup & Prerequisites
AI SOAR Module Setup & Prerequisites: know what's missing first
Module Setup and Prerequisites shows exactly what each module needs, and what is still missing, before you turn it on. The Autonomous SOC inventory gives profile-scoped proof of gates, verified tools, live connections, certified agents, and critical gaps.
Parte 66 · OSS Security Stack
AI SOAR OSS Security Stack: open-source tools, composed
The Open Source Security Stack composes twenty-five tools in eleven domains, across SIEM, network, threat intel, cloud, Kubernetes, forensics, deception, and AI observability. Each card shows the tool's role, required settings, and configure and docs links.
Parte 67 · Doc Generator
AI SOAR Doc Generator: pick the documents, start from evidence
Generate Compliance Documents starts from your uploaded evidence and system configuration. Pick a System Security Plan, Contingency Plan, Risk Assessment, Audit Report, CMMC Certification package, or ISO 27001 documentation.
Parte 68 · AI Policy Wizard
AI SOAR AI Policy Wizard: eight steps to tailored policies
The AI Policy Generator is an eight-step guided wizard: provide your context, upload existing documents, and complete a brief security assessment. From there, the AI drafts security and privacy policies tailored to your organization, in minutes.
Parte 69 · Policies
AI SOAR Policies: start from your business context
Security Policies handles AI-powered policy generation and management, starting from your organization's business context. Tabs move through Regulations, Generate, and the Policy Library, so context, requirements, drafting, and the finished set stay in one flow.
Parte 70 · Sector Compliance
AI SOAR Sector Compliance: every regulated sector, one page
Sector Regulations holds compliance profiles across banking, healthcare, government, energy, insurance, SOC 2, and international AI regulation. The governed sector builder creates an evidence-grounded baseline, gets it approved, and continues in the Launchpad flow.
Parte 71 · Banking & Financial
AI SOAR Banking & Financial: a guided path through bank regulation
The Financial Compliance Center lists regulators from the OCC and FDIC to PCI DSS, SOX, GLBA, BSA/AML, DORA, NCUA, and CIS Controls. Its guided compliance journey organizes checks, tests, evidence, agents, and reports, without claiming compliance before evidence exists.
Parte 72 · Fraud Detection
AI SOAR Fraud Detection: evidence first, from day one
Fraud Detection and Transaction Monitoring brings real-time fraud detection, behavioral analytics, and case management together. Its guided journey covers BSA/AML, FATF, FinCEN, and OFAC, and never claims compliance before evidence exists.
Parte 73 · AML/KYC Center
AI SOAR AML/KYC Center: an evidence-first compliance journey
AML/KYC Compliance manages anti-money laundering and know-your-customer compliance in one place. Its guided journey covers BSA/AML, FATF, FinCEN customer due diligence, and OFAC, and cards track high-risk customers, pending KYC, politically exposed persons, and sanctions hits.
Parte 74 · Human Review Workbench
AI SOAR Human Review Workbench: people make the final call
The Human Review Workbench is a multi-reviewer adjudication queue, fed live from the review case table. Cards track pending, overdue, and in-progress cases and AI versus human scores, and each case shows its priority, status, and due date.
Parte 75 · Evidence Package Export
AI SOAR Evidence Package Export: proof an auditor can use
Evidence Package Export builds government-operable evidence bundles, live from the evidence packages table, with real SHA-256 hashes. Cards count total, signed, and pending packages, with JSON, PDF, and CSV export formats.
Parte 76 · AI HealthCheck
AI SOAR AI HealthCheck: test the model before you trust it
AI HealthCheck covers AI model validation with test suites, acceptance thresholds, drift monitoring, and audit-ready evidence packs. This workspace's fifteen test cases are sorted into hallucination, compliance, bias, jailbreak, and drift.
Parte 77 · AI Governance
AI SOAR AI Governance: every AI application on a register
AI Governance assesses AI applications against the OWASP Top 10, NIST AI RMF, and MIT AI Risk, and reports governance KPIs. Each registered application shows its type and provider, with an agent scan for each framework.
Parte 78 · Automation
AI SOAR Automation: see what a rule will do before it runs
The Security Automation Engine unifies automation for threat detection, compliance, vulnerability management, and incident response. Each rule shows its trigger and risk level, and seventeen automation domains list their functions, tools, agents, and outputs.
Parte 79 · K8s Security
AI SOAR Kubernetes Security: know where to harden first
Kubernetes Security brings cluster assessments, CIS benchmarks, and a platform self-assessment into one page. The self-assessment checks the SOAR platform itself: seven of ten checks pass, and each failed check is listed, so the team knows where to harden first.
Parte 80 · Detection Engineering
AI SOAR Detection Engineering: Sigma rules your team can read
Detection Engineering keeps Sigma rules where they are authored, validated, and evaluated. The editor takes Sigma YAML with a required title, log source, and detection condition, and matches emit unified findings tagged Sigma.
Parte 81 · Control Coverage
AI SOAR Control Coverage: NIST 800-53 status and owners
Control Coverage tracks NIST SP 800-53 Revision 5 security controls by family. The control list shows each control's status and the team responsible for it, and assessments record satisfied and other-than-satisfied results.
Parte 82 · Personnel & Roles
AI SOAR Personnel & Roles: who holds each security role
Personnel and Security Roles manages security roles, contacts, and training records for the NIST SP 800-53 personnel security family. Cards count active personnel, open vacancies, overdue training, and background checks.
Parte 83 · Japan AI Compliance
AI SOAR Japan AI Compliance: APPI and the METI AI Guidelines
Japan AI Compliance tracks the APPI privacy framework and the METI and MIC AI Guidelines for business governance. Its guided journey has forty-eight checkpoints for the active profile, without claiming compliance before evidence exists.
Parte 84 · Brazil AI Compliance
AI SOAR Brazil AI Compliance: LGPD now, the AI Bill next
Brazil AI Compliance tracks the LGPD, ANPD incident rules, and the emerging AI Bill. Its guided journey has forty-eight checkpoints for the active profile, and the catalog lists seven Brazilian requirements with status, mapped controls, and test cadence.
