Building Trust Into Agentic SOC Tools with Oren Saban

Value of the Information & Strength of the Argument

The value of the information is high, as it provides practical insights from an industry expert with direct experience in building and deploying agentic SOC tools. Oren Saban’s background at Microsoft and his current role at Mate Security lend credibility to his perspectives. The argumentation is solid, with clear reasoning for why agentic platforms are structured as swarms of specialized agents, the importance of context and data quality, and the challenges of calibrating AI confidence. He offers concrete examples, such as the difficulty of handling unstructured data and the need for governance mechanisms. The discussion is balanced, acknowledging both the potential and the limitations of current AI capabilities. However, the arguments are largely anecdotal and lack empirical evidence or citations, which slightly weakens the overall rigor.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate; the conversation is based on expert opinion and industry experience rather than peer-reviewed research. The sources cited are primarily the podcast’s own links and the guest’s LinkedIn profile, which are not academic references. The title accurately reflects the content, focusing on building trust in agentic SOC tools. The discussion is coherent and well-structured, but it does not provide formal citations or data to support claims. The adequacy between title and content is strong, as the entire episode revolves around trust and practical implementation. No comments were provided, so no analysis of public reception is possible.

The title accurately reflects the core theme of building trust in agentic SOC tools, which is the central topic of the conversation.

8/10

The conversation features an experienced practitioner (Oren Saban, CPO of Mate Security, ex-Microsoft) discussing practical aspects of agentic SOC tools. The discussion is grounded in real-world experience and industry trends, but lacks formal citations or empirical data. The claims are plausible and align with current industry knowledge, but are not rigorously verified.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 00:00Introduction and context about the rise of agentic SOC tools at RSA.
• 02:00Oren Saban introduces his background and current work at Mate Security.
• 05:00Discussion on the capabilities of new agentic SOC tools compared to previous automation.
• 10:00Challenges of handling unstructured data and the importance of context.
• 15:00Architecture of specialized agents vs. a single generalist model.
• 20:00The hardest part: calibrating AI confidence and saying 'I don't know'.
• 25:00New skills for analysts: critical thinking, governance, and leveraging AI.
• 30:00Which skills become obsolete, like mastering query languages.
• 35:00The future of SOC structure: tierless SOC and the role of education.
• 40:00The risk of prompt injection attacks and the need for vigilance.

• Blueprint Podcast — Podcast's official website for contact and more information.
• SANS LDR551: Building and Leading Security Operations Centers — Course mentioned by John Hubbard for SOC leaders.
• SANS SEC450: SOC Analyst Training — Course mentioned by John Hubbard for SOC analysts.
• John Hubbard on LinkedIn — Host's LinkedIn profile.
• Oren Saban on LinkedIn — Guest's LinkedIn profile.
• SANS Cloud Security Exchange 2026 — Event mentioned in the description.

• SANS Institute — The host's organization, providing training and research in cybersecurity.