Where AI in the SOC is actually delivering — and where it isn’t

**Executive summary:** The article summarizes a Sophos webinar assessing how AI realistically improves SOC operations today—highlighting substantive gains in detection, alert triage, contextualized investigations, and analyst enablement—while warning of limitations such as lack of business context, poor handling of novel threats, potential skill erosion, and the need for transparent, human-centered vendor designs.