In this episode, Ahmed Achchak (CEO & co-founder of Qevlar AI) sits down with Erik Bloch, VP of Security at illumio and former SOC leader at Salesforce and Atlassian, to explore how AI is blurring the traditional divide between MSSP and enterprise SOCs.

Erik breaks down why MSSPs operate like standardized, metric-driven service products, while enterprise SOCs remain bespoke, and how autonomous AI might flip the script.

You’ll discover:

→ Why AI fits naturally into MSSP workflows but struggles in enterprise SOCs (and what is needed to fix it for maximum results)

→ What MSSPs get right about process and measurement and what enterprises can learn from it

→ How autonomous agents could unlock deep personalization at scale for MSSPs

→ The people and process blockers holding back AI adoption in the enterprise

→ Why phishing is still every SOC’s biggest time sink and how AI can actually help

→ What vendors overhype about AI and what they should focus on instead

Agenda:

00:00 – Intro: How AI blurs the MSSP vs. enterprise SOC line

03:21 – Where AI fits today and where it fails

03:57 – MSSPs run on process; enterprises run on chaos

06:36 – Can autonomous AI personalize without breaking scale?

07:12 – Remove the haystack vs. hunt the needle

10:58 – What AI can offload to help SOC teams do real work

12:17 – Why phishing still dominates SOC workload

13:46 – Fire Round: One alert type to ban forever

18:47 – What MSSPs and enterprises should learn from each other

19:30 – The AI pitch vendors love that nobody actually needs

Follow Erik Bloch on LinkedIn:

https://www.linkedin.com/in/erikbloch/

Follow Ahmed on LinkedIn:

https://www.linkedin.com/in/ahmed-achchak-872554109/

Learn how Qevlar AI automates alert investigation so your analysts don’t burn out: www.qevlar.com 

AI promises to transform security operations but how much of that is actually happening today? In this episode, Ahmed Achchak (CEO of Qevlar AI) talks with Dr. Anton Chuvakin, Security Advisor at Office of the CISO at Google Cloud, to explore the real, measurable ways AI can improve your SOC and the hard limits many organizations overlook.

You’ll discover:

• Where AI reliably adds value in security operations today and where it doesn’t.
• Why poor data, not weak models, is the biggest blocker to AI success in SOCs.
• The key metrics and KPIs that matter when evaluating AI’s effectiveness.
• What human skills will grow in importance in AI-augmented SOCs and which ones matter less.

Agenda:

00:00 – Introduction: Can AI actually help the SOC?

01:06 – Why “AI SOC” is a misleading term

02:27 – The real reason AI won't run the SOC anytime soon

03:49 – Why better AI doesn’t solve bad data

04:18 – Measuring AI’s impact: productivity vs. autonomy

05:54 – Why GenAI improvements aren't enough without better processes

07:12 – Should you track AI’s accuracy?

08:18 – What AI should actually improve in SOC workflows

08:46 – The human skill that matters most in AI-augmented SOCs

10:01 – What SOC skill might matter less in the future

11:08 – Fire Round: Advice Anton repeats but nobody listens to

12:12 – The SOC transformation most organizations keep postponing

13:46 – Why many SOCs are still struggling with cloud in 2025

15:14 – Wrap-up: What Anton finds surprising about today’s SOCs

Follow Dr. Anton Chuvakin on LinkedIn:

https://www.linkedin.com/in/chuvakin/

Dr. Chuvakin’s blog “Anton On Security”:

https://medium.com/anton-on-security

Follow Ahmed on LinkedIn:

https://www.linkedin.com/in/ahmed-achchak-872554109/

Stay tuned for Qevlar AI updates:

https://www.linkedin.com/company/qevlar/

Curious to learn how Qevlar AI can automate your alert investigation so your team can focus on the alerts that matter?

Head to: https://www.qevlar.com/

Most “AI-powered” security tools are just brittle automation wearing a fancy badge. In this episode, Qevlar AI CEO Ahmed Achchak sits down with cybersecurity automation expert Filip Stojkovski to ask the hard questions:

Why are L1/L2 workflows still broken?
What separates true AI agents from glorified SOAR playbooks?
And how can you actually measure whether AI is making smart decisions or just moving faster?

They break down the limits of traditional automation, expose “AI SOC” vendor red flags, and map a real path toward autonomous, human-aligned security operations.

Agenda:

00:00 – Why L1/L2 workflows are broken

01:13 – Are we automating… or just duct-taping faster?

02:44 – AI SOAR vs. autonomous agents: what’s the real difference?

03:09 – When automation becomes a maintenance nightmare

04:46 – What humans still do better in the SOC

06:20 – AI ROI: why speed isn’t the right metric anymore

08:00 – Metrics successful SOCs measure

10:32 – How to spot fake “AI SOC” vendors

13:27 – Where to start if you want true autonomy

15:06 – Fire Round: The truth about AI in security

Follow Filip on LinkedIn: https://www.linkedin.com/in/filipstojkovski/

Filip's blog: 

https://www.cybersec-automation.com/

Follow Ahmed on LinkedIn:

https://www.linkedin.com/in/ahmed-achchak-872554109/

Stay tuned for Qevlar AI updates:

https://www.linkedin.com/company/qevlar/

Curious to learn how Qevlar AI can automate your alert investigation so your team can focus on the alerts that matter?

Head to: https://www.qevlar.com/