“Whether automating intake and triage, performing vulnerability code reviews, or monitoring compliance, gen AI delivers speed, consistency, and scalability,” he notes.
Based on recent proof of concepts, and an analysis of human resource costs, both internal and external, Sarnot says he sees the potential to achieve sustained cost reductions of 30% to 50%, depending on the organization’s current cybersecurity investments, while exponentially increasing the scope and depth of security activities.
Gen AI allows cybersecurity professionals to offload routine, time-intensive tasks while maintaining accuracy, Sarnot says. Unlike traditional AI/ML techniques, limited by the need for structured data, gen AI can integrate diverse cybersecurity signals and effectively handle abstract or unstructured data that previously required human review. This allows cybersecurity professionals to focus on higher-value, novel work, such as strategic cyber risk management and threat modeling. “Ultimately, it’s about scaling smarter, improving efficiency, and reducing burnout from manual workflows,” he says.