Cohere shows a security agent for incident response

Cohere published a practical example of how an enterprise agent can work in security operations. The company connected its North platform with the Wiz cloud security tool through a custom server based on the Model Context Protocol. The result is an agent that can review a finding, gather details, draft a report, open a task and update the finding status in Wiz from one instruction. For security teams, the largest problem is the gap between signal and action. Wiz can identify a high-risk combination, such as an internet-exposed machine, a critical vulnerability and access to sensitive data. The signal itself is useful. Someone still has to establish context, find existing tasks, write an incident report, mark status and inform others. The agent uses eight separate tools, including listing open findings, getting incident details, searching vulnerabilities, querying cloud inventory, checking compliance frameworks and changing finding status. North authenticates to the server with a shared secret, while the server uses OAuth2 service account authentication toward Wiz. Cohere describes three uses. The first is impact analysis of critical risk combinations in 20 seconds instead of part of a security engineer’s morning. The second is assisted response to the most critical open finding, including a report and task in Linear. The third is a weekly security posture summary every Monday at 3:00. The business impact is concrete. A company does not have to wait until people process raw alerts. Security engineers begin with a prefilled report and judge the agent’s reasoning. At the same time, the need grows for accurate data, limited permissions and review formats, because the agent can write into systems. Terms: MCP is a protocol for connecting AI tools to external systems and data. An incident report is a structured record of a security finding. A service account is a technical account with defined rights for automation.

Cohere shows a security agent for incident response

The full article is available to users registered at Hard Skills