What an Agentic SOC actually looks like
Move beyond AI copilots and basic automation to see how autonomous agents can operate across modern security workflows.
AWS BUILDER LOFT PRESENTS
Agentic SOC: From Hype to Production
Hosted by ReversingLabs
A practical look at building trustworthy
AI-driven security operations
AI agents are moving rapidly from experimentation into real security workflows. But getting from a promising demo to production-ready autonomous security requires more than another AI model.
Join ReversingLabs, AWS, ExtraHop, and leaders from across the security and AI ecosystem at AWS Builder Loft in San Francisco for a technical exploration of the architecture, intelligence, and trust required to build the Agentic SOC.
Thursday, November 19, 2026
9:30 AM – 2:00 PM PT
AWS Builder Loft | San Francisco
What You'll Learn
How trusted context improves agent decisions
Explore how network telemetry, software intelligence, file analysis, and other security signals can give AI agents higher-quality context.
Where autonomy makes sense today
Learn which security workflows are ready for greater agent autonomy and where human judgment, approval, and oversight remain essential.
How the architecture comes together
See how cloud infrastructure, real-time visibility, verified threat intelligence, AI reasoning, and execution can operate as layers within an Agentic SOC.
How to evaluate agentic security technologies
Walk away with practical questions to ask around trust, data quality, explainability, autonomy, and operational risk.
Featured Speakers
Cory Langner
Reversinglabs
CSP's & AI Alliances
%2520-%2520Head%2520Image-150x158.png&w=384&q=75)
Marc Moring
ReversingLabs
Vice President, Sales
Tyler Suss
ReversingLabs
Vice President, Marketing
Erik Thoen
ReversingLabs
Vice President, Product
AWS Speaker
Amazon Web Services
ExtraHop Speaker
ExtraHop
Additional Speakers Coming Soon
We're bringing together leaders from across security, cloud, and AI.
Agenda
9:30 AM
Doors Open + Networking
Meet fellow security practitioners, builders, technology leaders, and participating partners.
Welcome + Opening Keynote
From Hype to Production: Why Agentic Security Is Different
Context, trust, autonomy, and what changes when AI moves from recommending actions to taking them.
Technical Perspectives
Building the Context Layer for the Agentic SOC
Perspectives from leaders across network security, software intelligence, cloud infrastructure, and AI.
Architecture Session
Inside a Production-Ready Agentic SOC
A technical walkthrough of how visibility, verified intelligence, reasoning, and execution can work together.
Executive + Technical Panel
How Much Autonomy Is Too Much?
Where agents can act today, where humans still need to stay in the loop, and what must change before autonomous security can operate at scale.
Networking
Continue the conversation with speakers, partners, and fellow attendees.
The Agentic SOC Is Moving From Concept to Production
AI copilots have already changed how security teams search, investigate, summarize, and respond.
The next phase is different.
Autonomous agents will increasingly reason across security signals, make decisions, coordinate workflows, and take action on behalf of security teams.
The opportunity is significant. So are the questions.
- What context can an agent trust?
- What actions should it be allowed to take?
- How do you verify the files, software, and artifacts it encounters?
- Where should humans stay in the loop?
Agentic SOC: From Hype to Production brings together cloud, security, threat intelligence, and AI leaders to explore those questions through a practical, technical lens.
Inside the Architecture of the Agentic SOC
The Agentic SOC cannot depend on AI reasoning alone.
Production-ready agentic security requires multiple layers working together:
Observe
Real-time network, cloud, and environmental context gives agents visibility into what is happening.
Verify
Threat intelligence and deep software and file analysis help determine whether the artifacts agents encounter can be trusted.
Reason
AI models interpret context, connect signals, and determine the appropriate next action.
Act
Secure cloud infrastructure and defined controls allow agents to execute approved actions safely.
At AWS Builder Loft, we'll explore how these layers come together and where the industry is headed next.