Opens in a new tab
needsahuman.

AI tools for information security analysts: what they do and what they cost

AI security tools triage alerts, pull related events into one investigation, write search queries from plain-language questions and summarize incidents for analysts. Analysts decide what to do with the findings, and teams choose which response actions the tools may take on their own.

Will AI replace information security analysts? Partly. They score 59 out of 100 on our scale, where higher is safer ( D; could be 2033–2043). See which tasks AI can do in this job.

We have not tested these tools. Each entry says what the vendor says its tool does, matched to tasks from this job's official description, with prices as listed on the vendor's site on October 3, 2026. Prices change; check before you buy. No tool pays to be listed and we earn nothing from these links.

Microsoft · security operations AI assistant

Microsoft Security Copilot

Triages alerts, summarizes incidents and turns plain-language questions into queries across Microsoft security products.

Tasks in this job it helps with
  • Monitor use of data files and regulate access to safeguard information in computer files.

Consumption-based in security compute units (SCUs): provisioned SCUs $4 per SCU per hour (minimum 1, billed monthly); overage SCUs $6 per SCU used. Prices in USD, given as estimates. Microsoft 365 E5/E7 customers get 400 SCUs per month per 1,000 user licenses (up to 10,000 SCUs). (checked October 3, 2026)

Vendor site
CrowdStrike · security operations AI assistant

Charlotte AI

Triages detections with a verdict and explanation, runs investigations and prioritizes exposures.

Tasks in this job it helps with
  • Monitor use of data files and regulate access to safeguard information in computer files.
  • Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.

not published (Charlotte AI is not listed on the CrowdStrike pricing page) (checked October 3, 2026)

Vendor site
SentinelOne · security operations AI assistant

Purple AI

Investigates alerts, answers plain-language questions without query writing and records investigations.

Tasks in this job it helps with
  • Monitor use of data files and regulate access to safeguard information in computer files.

Price not published (checked October 3, 2026)

Vendor site
Google Cloud · SIEM / SOAR

Google Security Operations (with Gemini)

Lets analysts search security data in plain language, with Gemini case summaries and recommended responses.

Tasks in this job it helps with
  • Monitor use of data files and regulate access to safeguard information in computer files.

not published (packages Standard, Enterprise and Enterprise Plus, based on ingestion; 'Contact sales for pricing'). Gemini in security operations is listed in the Enterprise package and in Enterprise Plus, which includes everything in Enterprise. (checked October 3, 2026)

Vendor site
Darktrace · network detection and response / AI SOC analyst

Darktrace Cyber AI Analyst

Learns normal activity on a network and investigates alerts, writing plain-language incident summaries.

Tasks in this job it helps with
  • Monitor use of data files and regulate access to safeguard information in computer files.

not published (tailored quote) · free trial (checked October 3, 2026)

Vendor site
Palo Alto Networks · SIEM / SOC platform

Cortex XSIAM

Groups alerts into prioritized cases and automates triage and response in one SOC platform.

Tasks in this job it helps with
  • Monitor use of data files and regulate access to safeguard information in computer files.

Price not published (checked October 3, 2026)

Vendor site

AI tools for other jobs · Will AI replace information security analysts?