‘SOC Auto-Focus isn’t just another chatbot,’ says Blumira CEO Matthew Warner. ‘It’s not here to solve the world’s problems with a generic answer. It’s here to help teams work through investigations faster, to guide them with clear next steps and to teach them over time. The real goal is to make security feel less overwhelming and to help people actually sleep at night.’
Blumira has launched an AI-powered SOC Auto-Focus tool to help MSPs detect, understand and respond to security threats faster and with greater accuracy.
Built to operate out-of-the-box with no extended training period, SOC Auto-Focus provides insights into security events and immediately correlates related findings, assesses historical behavior and offers tailored recommendations. Instead of just surfacing an alert, it explains why it matters and what steps to take next.
“SOC Auto-Focus isn’t just another chatbot,” Blumira CEO Matthew Warner (pictured above) told CRN in an interview. “It’s not here to solve the world’s problems with a generic answer. It’s here to help teams work through investigations faster, to guide them with clear next steps and to teach them over time. The real goal is to make security feel less overwhelming and to help people actually sleep at night.”
[Related: XChange Panel: The Most Important Part of AI Is Being Ready For It]
Unlike other AI solutions that require upfront model training or rely on open-ended prompts, Warner said Blumira’s tool is tightly integrated with its existing detection workflows, serving as a built-in analyst assistant.
“It automatically connects the dots between findings, even across users and timeframes, so that analysts don’t have to piece things together themselves,” he said. “It’s like having a security expert at your side who not only gives you the answer but explains why it’s the right one. And that makes it a powerful learning platform as well.”
Travis Short, SOC analyst at Greenfield, Ind.-based NineStar Connect, said the tool translates technical alerts into plain language summaries, pointing him directly to the impact.
“It bridges the knowledge gap instantly, saving me from spending time digging through logs or Googling for answers,” he said in a statement.
Warner said Blumira spent more than 18 months developing and validating the AI engine, working with its incident detection engineering team to ensure recommendation accuracy.
“We created a scoring framework to evaluate every AI output,” the CEO said. “Through that tuning, we’ve gotten from 78 percent to about 97 percent high-quality response rates, and we’re not stopping there.”
The timing of the launch also coincides with updates to the Ann Arbor, Mich.-based vendor’s MSP partner program, which offers rebates, co-marketing support, certification pathways and help writing case studies. In addition to dropping annual credits for partners, the program, which received five stars on CRN’s 2025 Partner Program Guide, also offers full support for CMMC Level 2 certifications.
Looking ahead to 2026, Blumira is planning to expand its platform integrations, including two-way support for professional services automation (PSA) tools like ConnectWise and AutoTask, and offer more customization options like customer-driven detection engineering and flexible data ingestion.
“SOC Auto-Focus is here to make operations faster, smarter and more human,” Warner said. “It’s not about removing people from the loop. It’s about making them better at what they do and helping them feel confident while doing it.”
