Friday SIEM post is here.
This week, we crunch the numbers.
You’ve probably seen the posts and blogs from Rafał Kitab about the very different numbers floating around the SOC. How many alerts analysts handle, how long investigations take, how much time is wasted, how much automation saves.
And somehow, depending on which report you read, the numbers can be very different.
I think some of them are made up. Or, to be nicer, calculated in ways that serve very different purposes.
So we want to see what the reality actually looks like.
No vendor benchmark. No hidden agenda. No “AI saves analysts 97.3% of their day” conclusion already written before we collect the data.
Just practitioner research.
If you’re a SOC leader and want to participate, let us know.
On the plus side, I feel like I’m seeing fewer of those wild reports lately. Not sure if all the ranting changed how the market publishes these numbers, or LinkedIn finally learned to stop serving them to me 😄
Originally posted on LinkedIn on 21 August 2026
Read the original post and the comments