N-able, Inc. , a global leader in cyber resiliency software, today released its inaugural 2025 State of the SOC Report. Drawing on frontline insights from the Adlumin Managed Detection and Response (MDR) SOC, the report examines the evolving role of Security Operations Centers (SOCs) amid a rapidly expanding attack surface and increasingly sophisticated cyberthreats. The findings highlight a critical reality: effective cybersecurity today hinges on a symbiotic relationship between artificial intelligence (AI) and human expertise, delivering faster threat detection, improved incident response, and reduced dwell time.
The Expanding Role of AI in Modern SOCs
- Accelerating Detection and Analysis:
AI-driven workflows have cut SOC analysis times significantly, with indicators of compromise (IOCs) identified in as little as 10 seconds, dramatically reducing reliance on prolonged manual reviews. - Automating Investigations:
The report shows 70% of incident investigations and threat remediation can now be fully automated, easing analyst workloads and speeding response times. - Resiliency Through Proactive Defense:
As Vikram Ramesh, Chief Strategy Officer at N-able, emphasized, “Cyber resiliency depends on integrating AI with expert-led response — enabling organizations to not just react but to anticipate and outpace evolving threats.”
Findings from the 2025 Report
- AI Efficiency Gains:
AI tools have slashed SOC processing times, making real-time security management more achievable. - Human Validation Still Critical:
Despite AI advances, 86% of alerts still escalate into tickets requiring human analyst review, underscoring the continued necessity of skilled security professionals. - Shifting Threat Origins:
- 56% of threat detections stem from endpoints.
- 44% now originate from cloud environments — a rapidly growing attack vector demanding new defense strategies.
- Ransomware Remains a Top Concern:
From December 2024 to February 2025, the Adlumin SOC processed nearly 500,000 alerts, escalating 83,171 security incidents, including 2,684 ransomware threats. - AI Beyond Enrichment:
Will Ledesma, Senior Director of MDR Cybersecurity Operations at Adlumin, noted: “In 2024, AI shifted from mere threat enrichment to true operational adaptation — a fundamental evolution captured in this year’s SOC report.“
The Future of Cyber Resiliency
The 2025 State of the SOC Report not only highlights today’s threat landscape but also provides a blueprint for building adaptive, AI-augmented security operations. As organizations strive for greater speed, precision, and protection, combining AI automation with expert-led defense strategies emerges as the path forward.
