Google Expands Agentic Defense With Wiz, Gemini, and SecOps Automation

Google Cloud unveiled an agentic defense strategy that combines Wiz, Gemini, Mandiant, and Google Security Operations to automate threat detection, investigation, and remediation. The company said the approach is designed to counter attackers' growing use of AI, citing Mandiant data showing the average time from initial breach to access handoff has fallen to 22 seconds. Google also tied the strategy to broader code and application security efforts, including CodeMender, an AI agent for code security, and new protections such as Wiz AI Application Protection Platform and AI-BOM.

The announcement places Google more directly in the fast-growing market for AI-driven and agentic SOC platforms, where vendors including CrowdStrike, Microsoft, Palo Alto Networks, and SentinelOne are also pushing automation-heavy security operations. Google said it has integrated Wiz attack surface management with Google Threat Intelligence and added SecOps agents for triage, threat hunting, and detection engineering, while rivals such as CrowdStrike are promoting agentic MDR and an agentic SOC model to help enterprises scale managed detection and response.