Vega, the pioneer of Agentic Cyber Defence, today launched Detection Skills: an open standard that redefines security operations for the AI era. The standard captures a team’s expert judgment as a self-improving agentic loop across detection, triage, and investigation. Available to the community as an open standard, or natively within the best-in-class Vega platform, they allow modern Cyber Defence Engineers to architect their reasoning once and scale it across everything they defend.
It gives every company an answer to the question that matters most: can our defence keep pace with AI?
“AI-driven adversaries bypass static rules in every legacy SIEM, and no rule catches an attack it has never seen,” said Eli Rozen, co-founder and CTO, Vega. “Detection Skills answer with scaled AI reasoning that brings the judgment of your best Cyber Defence Engineers to every alert, in real-time. We made the standard open to ensure the whole industry rises with it: as attacks scale, defence compounds.”
Why Now?
Frontier AI has collapsed the economics of cyberattacks. Intrusions that took skilled teams weeks now take minutes, with advanced models breaking containment and autonomously breaching organisations. Defences built on legacy SIEM have not kept pace: they can only recognise known patterns in a threat landscape where attacks are generated, not repeated.
More from Cybersecurity
- OpenAI Launches Private Misuse Tracking – How Can It Detect Misuse Without Storing Sensitive Enterprise Data?
- Premier League Clubs Face £100,000 Fines Under New Mandatory Cybersecurity Rules
- Schools And Universities Are Now The Most Hacked Organisations In The World
- France’s Tax Agency Lost 678,000 Accounts To A Cyberattack – How Will SaaS Fight AI-Accelerated Breaches?
- How RuView Tracks Human Movement And Breathing Without Cameras – Is Your Home Already Watching You?
- Zero-Day Attacks: What Happens When Hackers Find A Flaw Before Anyone Can Fix It?
- Trump Greenlights Private Tech Firms To Join The Fight Against Cybercriminals
- Meta AI Escape: Model Hacks Third-Party Service During Test
From Static Rules to AI Reasoning
Just as Sigma defined the traditional detection rule format, Detection Skills is what comes next for AI-first Cyber Defence teams. The engineer who builds a detection and the analyst who answers it at 2 a.m. often never meet, and the context dies in the handoff.
Detection Skills solves that: built on the Agent Skills framework originally developed by Anthropic, it attaches triage, investigation, and optimisation directly to the detection, so the reasoning travels with it, enabling security teams to:
- Detect and decide at AI speed. Triage and investigations run automatically the moment a detection fires, slashing MTTD and MTTR. Only what matters reaches a human, with a finished, evidence-backed workbook attached
- Scale cyber defence expertise. Author a skill once and the same judgment reaches every alert, known or unknown. Engineers keep complete transparency and control over the AI’s reasoning: what it checked, why it decided, and no change without their sign-off
- Adopt without disruption. Works alongside existing security investments. It launches with the Agentic Detection Library: 50+ skills from Vega Research and our partners, plus a sandbox to build, test, and export spec-compliant detections, and GitHub to contribute your own
Vega proved Detection Skills in production on its Cyber Defence Platform, the standard’s reference implementation. Built on the Security Analytics Mesh (SAM), the platform runs the full loop directly on an organisation’s data wherever it lives, across cloud object storage, Legacy SIEMs, and data lakes, with no data migration or ingestion tax.
