What we built: July 2026

Expel monthly product recap: introduces six AI-focused threat hunts (AI sign‑ins, shadow AI discovery, rare process lineages, guardrail file changes, anomalous AI process creation, and unusual AI domains); launches RAD, an AI investigation agent for identity and AWS alerts; deploys phishing auto-classification and alert-similarity triage to reduce analyst workload; and adds one-way status syncing for Palo Alto Cortex XDR.