Reston, Va. – – September 29, 2026 -- Leidos (NYSE:LDOS) unveiled UpHold EffectTM Agentic SOC Automation, a new capability using AI agents to triage cybersecurity alerts around the clock for federal security operations center teams, addressing a surge in alert volume driven by automated adversary attacks.
AI agents investigate threats while analysts retain final control over actions
The system works continuously to triage incoming alerts, gather contextual data and assemble findings for human analyst review. Customers determine the scope of AI authority, deciding whether the technology can only recommend actions or is permitted to execute them directly, based on mission requirements and risk tolerance.
Every AI decision generates an auditable record documenting what the system observed, concluded and proposed or executed, according to Leidos.
Capability targets high-security federal environments including Impact Level 5
A FedRAMP Class D (High) deployment option is currently available. Leidos said the capability can also provide a pathway toward Department of War Impact Level 4 and 5 environments with appropriate government sponsorship, targeting the most sensitive federal security operations.
The tool is designed to integrate with agencies' existing security technology stacks rather than requiring wholesale replacement of current systems, according to the company.
Leidos positions offering within broader UpHoldTM suite leveraging existing SOC operations
Steve Hull, president of Leidos Digital, said cyber teams need to keep pace with threats without giving up control, noting the automation can absorb investigative workload while agencies retain decision-making authority over when AI recommends versus acts.
Agentic SOC Automation is a feature within UpHold EffectTM, Leidos' agentic cyber response offering, which also covers adversary detection, cyber deception, cloud security and threat hunting. Leidos said it draws on experience operating some of the government's largest security operations centers to integrate and configure the capability around each customer's specific mission and governance requirements.