Tanium relaunches Security Operations platform with AI threat hunting
Tanium Security Operations adds Endpoint Drift behavioral detection, an Insights Engine and natural-language querying through Tanium Atlas.
Tanium relaunched its security operations platform, Tanium Security Operations, on October 28, 2026, adding endpoint behavioral detection, automated response and AI-based threat hunting features aimed at AI-driven cyberattacks, according to datanet.co.kr.
The platform draws on real-time endpoint data from corporate endpoint management to identify anomalies, and can run alongside existing SIEM and EDR solutions. A new feature called Endpoint Drift learns each endpoint's normal behavior and ranks out-of-range systems by priority. The Insights Engine replaces the company's existing process injection detection capability.
Response actions include stopping a single process, collecting forensic evidence and host isolation, and can be applied across multiple systems at once. Under a Federated SOC model, several security teams can share one platform with separate alert suppression and automated response rules.
Tanium Atlas lets analysts query endpoints in natural language and recommends closing, escalating, hunting or containing each alert. For companies that need support from Tanium's own threat hunters, the company offers Tanium HuntIQ.
Quick answers
What is Tanium Security Operations?
It is Tanium's relaunched security operations platform, which uses real-time endpoint data to detect anomalies and supports automated response actions across multiple systems.
What is Endpoint Drift in Tanium Security Operations?
A feature that learns each endpoint's normal behavior and ranks out-of-range systems by priority.
Does Tanium Security Operations replace existing SIEM and EDR tools?
No. According to the company, the platform can be used alongside existing SIEM and EDR solutions.