Omdia says governance, not autonomy alone, drives agentic SOC results

Omdia’s 2026 market update says governed agentic AI can improve security operations on Google Security Operations, with human review still central to response.
Omdia’s 2026 market update says security teams are adopting agentic AI quickly, but practitioner governance is what separates usable gains from unchecked automation.
What happened
Omdia’s Go-to-Market Insights and Advisory practice has published a 2026 market update on managed agentic security operations delivered through Google Security Operations, according to a PR Newswire release dated Aug. 6, 2026, from Overland Park, Kansas. The release says the update extends Omdia’s technical validation of Foresite Cybersecurity’s managed security operations on Google SecOps.
The release says the report responds to rising use of autonomous, AI-driven security operations. It says practitioner governance, not autonomy alone, is the factor that most clearly separates measurable results from risk.
Why it matters
The release says agentic AI is already moving into security operations at scale. It cites 52% of organizations with security operations centers as already deploying agentic AI, while 25% formally assess every agentic AI investment.
The release says the question is no longer whether teams will use autonomous tools, but how those tools are controlled. The report says every autonomous investigation at Foresite is reviewed and authorized by a named analyst before response actions are executed.
Key facts and figures
According to the release, Omdia validated a roughly 60% reduction in mean time to investigate, or MTTI, in the managed service model. It also says raw telemetry data surged by 278% while analysts maintained a flat investigation load.
The release says benign-event auto-identification rose from 25% to 86%. It also says automated threat response ran in under 15 seconds. Across managed services and the Omdia update, the company says it sustained 96% customer retention.
The release says Foresite delivers fully managed security operations on Google SecOps and uses its Catalyst platform to add operational governance, automation, and continuous compliance. It also describes Foresite as a Google Cloud Premier Partner with Security and MSSP specializations.
Background and context
The release says the original technical validation of Catalyst was commissioned by Google in 2025. It also says Foresite was named the 2026 Google Cloud Security Partner of the Year for North America at Google Cloud Next ’26.
Omdia Principal Analyst and Practice Director Tony Palmer is quoted in the release saying agentic adoption is outrunning oversight. The release says Palmer sees Foresite’s model as a practical answer to the gap between deployment and governance.
What officials said
Jeremy Hehl, Foresite’s chief evangelist, is quoted in the release saying the actions that cannot be taken back are validated by a named practitioner before execution. The release says that process distinguishes governed agentic systems from systems users are simply told to trust.
The release also says Foresite representatives will be at Black Hat USA 2026 in Las Vegas, including a happy hour co-hosted with Google and a podcast appearance by Hehl with Jay Bavisi on the EC-Council podcast.
What happens next
Foresite’s next public appearances named in the release are at Black Hat USA 2026. The company and Google are also expected to keep promoting the Catalyst and Google SecOps model as the market for agentic security operations expands.
Sources
Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.
View the Web StoryA visual, tap-through version of this reportThis is the AMP version of the article. Read the full article on Atlas Watchline.