Google Agentic SOC at RSAC: Triage Agent Auto-Investigates Alerts, Custom Security Agents via Remote MCP Server Support (GA April)
Google Cloud Blog·high signal
Google Cloud unveiled its Agentic SOC strategy at RSAC 2026, powered by Gemini's reasoning. New Triage and Investigation agent autonomously investigates alerts, gathers evidence, provides verdicts with explanations — now in preview in Google Security Operations. Security teams can build custom enterprise-ready security agents with remote MCP server support (GA early April). Google also completed its Wiz acquisition and is integrating Wiz's AI-ready security across multicloud infrastructure.