Vega, the pioneer of Agentic Cyber Defence, today launched Detection Skills: an open standard that redefines security operations for the AI era. The standard captures a team’s expert judgment as a self-improving agentic loop across detection, triage, and investigation. Available to the community as an open standard, or natively within the best-in-class Vega platform, they allow modern Cyber Defence Engineers to architect their reasoning once and scale it across everything they defend.
It gives every company an answer to the question that matters most: can our defence keep pace with AI?
“AI-driven adversaries bypass static rules in every legacy SIEM, and no rule catches an attack it has never seen,” said Eli Rozen, co-founder and CTO, Vega. “Detection Skills answer with scaled AI reasoning that brings the judgment of your best Cyber Defence Engineers to every alert, in real-time. We made the standard open to ensure the whole industry rises with it: as attacks scale, defence compounds.”
Why Now?
Frontier AI has collapsed the economics of cyberattacks. Intrusions that took skilled teams weeks now take minutes, with advanced models breaking containment and autonomously breaching organisations. Defences built on legacy SIEM have not kept pace: they can only recognise known patterns in a threat landscape where attacks are generated, not repeated.
More from Cybersecurity
- If Crypto Is Decentralised, Who Gets To Freeze Stolen Money? One Of Many Questions Raised By Binance’s $6.3 Billion Hack
- OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
- Are Employees Being Blamed For Cybersecurity Failures That Companies Should’ve Prevented? The Experts Weigh In
- Red Flag: The Cybersecurity Challenges Facing F1 Teams
- What Should Startups Know About Critical PHP Vulnerabilities And Their Business Risks?
- Is Your Startup One Google Outage Away From Shutting Down?
- OpenAI Says Its GPT-5.6 Sol Model Helped Find The PHP2Shell Flaws – How Does AI-Led Bug Hunting Change Open-Source Security?
- If One PHP Flaw Can Put 70% Of Websites At Risk, What Does That Say About The State Of Global Cybersecurity?
From Static Rules to AI Reasoning
Just as Sigma defined the traditional detection rule format, Detection Skills is what comes next for AI-first Cyber Defence teams. The engineer who builds a detection and the analyst who answers it at 2 a.m. often never meet, and the context dies in the handoff.
Detection Skills solves that: built on the Agent Skills framework originally developed by Anthropic, it attaches triage, investigation, and optimisation directly to the detection, so the reasoning travels with it, enabling security teams to:
- Detect and decide at AI speed. Triage and investigations run automatically the moment a detection fires, slashing MTTD and MTTR. Only what matters reaches a human, with a finished, evidence-backed workbook attached
- Scale cyber defence expertise. Author a skill once and the same judgment reaches every alert, known or unknown. Engineers keep complete transparency and control over the AI’s reasoning: what it checked, why it decided, and no change without their sign-off
- Adopt without disruption. Works alongside existing security investments. It launches with the Agentic Detection Library: 50+ skills from Vega Research and our partners, plus a sandbox to build, test, and export spec-compliant detections, and GitHub to contribute your own
Vega proved Detection Skills in production on its Cyber Defence Platform, the standard’s reference implementation. Built on the Security Analytics Mesh (SAM), the platform runs the full loop directly on an organisation’s data wherever it lives, across cloud object storage, Legacy SIEMs, and data lakes, with no data migration or ingestion tax.
