Expel, a security provider, has published a practitioner framework for implementing AI in security operations, supported by a decade of production AI experience. The "Trust vs. Impact" framework maps security workflows based on potential impact and system confidence, helping practitioners determine where AI should operate autonomously versus where humans should lead. The company released an interactive tool allowing security teams to plot their own workflows on the framework. Expel's AI engine, Ruxie, now includes capabilities such as agentic detection rule generation, AI-powered identity alert triage with 99.7% confidence, and AI-generated summarisation. The identity classification feature alone reduces alert volume by approximately 10%. The framework, interactive tool, and Ruxie capabilities are available now through Expel Workbench for managed detection and response customers.

Expel has launched Expel Managed SIEM, a co-managed service that integrates the company's detection engineering expertise into customers' existing Microsoft Sentinel and Splunk Enterprise Security environments. The service is now generally available as an add-on to Expel MDR. The offering handles detection strategy, writes custom detection logic, optimises data ingestion costs, and feeds SIEM alerts into Expel's MDR response workflows. Unlike traditional providers that profit from increased data volume, Expel helps customers control ingestion costs whilst maintaining security coverage. The service includes two tiers: Detection Engineering provides ongoing detection support and rule optimisation, whilst Performance Engineering offers deeper operational support including SIEM health monitoring and automation development. Customers retain full ownership of all detection rules created by Expel, with complete visibility into every tuning decision.

Leading MDR provider to celebrate security defenders with cutting-edge service innovations and exclusive VIP experiencesHERNDON, Va., April 28, 2025 /PRNewswire/ -- Expel , the leading managed detection and response (MDR) provider, today announced its return to the showfloor at RSAC™ Conference 2025. Find Expel in the South Hall of the Moscone Center (booth #0535) for product demos and activations celebrating the true heroes protecting our digital world: cybersecurity defenders."Security teams are often the unsung heroes of their organizations—protecting their businesses, people, and critical systems from threats every day," said Dave Merkel, co-founder and CEO, Expel. "But even the strongest defenders can't go it alone. Expel combines the best people, tech, and expertise to elevate our customers' efforts—creating a force multiplier against today's biggest threats for the best security outcomes."Security teams are fighting an uphill battle—balancing threats that are growing in volume, sophistication, and speed, especially enabled by generative AI, against tighter budgets and heightened scrutiny on their security programs. Expel combats these issues head-on by extending and enhancing security operations helping customers stay ahead of adversaries with industry-leading coverage across their attack surfaces, while maximizing the ROI on their existing security investments.Visit the booth to learn how Expel's human-centric, AI-driven MDR approach delivers the most comprehensive security coverage with unmatched results. Highlights include:A 17-minute mean-time-to-remediate on critical incidents, minimizing disruption so your business keeps running smoothly.on critical incidents, minimizing disruption so your business keeps running smoothly