The SOC in the age of AI
Watch this live episode of Threat Talks and walk away with a clear picture of what preemptive cybersecurity looks like in practice — and the three shifts every SOC must make to keep up with AI-enabled attackers.
The context — and the concrete steps
AI lowers the barrier for attackers dramatically. Tools like Strix can find vulnerabilities in an application in under 15 minutes — no specialist knowledge required. Attack volume and speed are both rising sharply.
Detection and response assumes you have time to react. That assumption no longer holds. SOCs that remain purely reactive have no future in this environment.
Preemptive security is two things: prevention — making it hard for attackers to get in at all — and automated response the moment something is detected. Not calling an analyst. Not opening a ticket. Countermeasures in seconds.
This episode covers how AI enables both, what the analyst role looks like going forward, and where to start if your SOC is still primarily reactive.
Meet the speakers
Lieuwe Jan has spent 20+ years building and running security operations. As CTO of ON2IT he leads the technical direction of the platform — including the shift from analyst-driven to software-driven SOC operations.
Rob works at the intersection of customer strategy and technical architecture. As Field CTO he translates emerging threats and platform capabilities into actionable guidance for organizations navigating the AI transition.
Watch the session for free
30 minutes with ON2IT CTO Lieuwe Jan Koning on AI, preemptive cybersecurity, and the future of the SOC.
Watch now — free access

