New AI Wingman layers for guidance, investigation and SOC acceleration, plus Third-Party AI Containment, help customers use AI safely and defend faster.
Heimdal today unveiled the next phase of its AI strategy, expanding AI Wingman with three new layers – Assist, Triage and SOC – alongside the introduction of Third-Party AI Containment.
Together, these capabilities build on Heimdal’s existing AI-powered protection and give organisations a clearer way to manage AI safely, speed up investigations and strengthen defence as the threat environment becomes faster, more automated and harder to contain.
Recent developments around frontier models have sharpened a question many CISOs are now being asked: what happens when attackers gain access to a new step-change in capability?
Heimdal’s view is that the answer is not another standalone assistant bolted onto the edge of the stack. It is AI built into the platform itself, where the data, control layers and response workflows already sit.
One umbrella, three layers, plus containment
AI Wingman is Heimdal’s umbrella for how AI is being brought into the platform. Its purpose is simple: help customers get value faster, make better decisions and strengthen security operations over time.
Also Read: CIO Influence Interview with Dipto Chakravarty, Chief Product and Technology Officer at Black Duck
It breaks into three practical layers, which, together with Third-Party AI Containment, will roll out in stages across 2026:
1. AI Wingman Assist
The platform guidance layer. It helps customers use Heimdal better, understand what they are seeing, apply best-practice settings and get faster value from setup through day-to-day operation.
2. AI Wingman Triage
The investigation support layer, powered by Heimdal’s multi-agent engine. It helps teams assess suspicious signals faster, validate what is real and move more quickly to the right next step.
3. AI Wingman SOC
The managed service layer brings AI acceleration into Heimdal’s SOC, helping analysts investigate faster, prioritise better, and cut defensive response time for managed SOC customers. The initial release covers 15 SOC-relevant protection features across the platform (including network firewall telemetry) and is expected to reduce L1 triage time by around 25%.
Third-Party AI Containment
Heimdal’s current answer to unmanaged AI use in the business. It uses existing control layers and supporting capabilities to improve visibility into shadow AI, reduce unmanaged exposure, limit unsafe actions and lower data leakage risk.
These capabilities sit alongside Heimdal’s existing AI-powered protection, including its patented AI and ML-based DNS capability and AI-powered email fraud protection, as well as wider work on AI-enhanced investigation, automation and defensive workflows.
Why now?
The pace of change is no longer gradual.
Customers are now dealing with two pressures at once. AI is showing up inside the business faster than policies and controls can keep up, while attacks are becoming faster, more automated and more capable. That means security teams need a clearer answer on both sides of the challenge: how to govern AI safely inside the organisation, and how to use AI to investigate and defend faster.
“Heimdal’s AI strategy is about practical advantage, not theatrics,” said Jesper Frederiksen, Chief Executive Officer at Heimdal. “Customers need clear visibility, tighter control and the ability to make decisions in minutes rather than hours as AI starts to change both how organisations operate and how they are attacked. Our focus is to help them use AI safely, move faster defensively and get more value from one unified platform.”
“We have moved well beyond AI as a productivity add-on,” said Morten Kjaersgaard, Founder and Chairman of Heimdal. “The real question now is how customers govern it, contain it, investigate faster with it and defend against what comes next. AI is only as strong as the foundation underneath it. That is why we are building it into the core of our platform, not bolting it onto the edge.”
Catch more CIO Insights: CIO as Orchestrator of Cross-Functional Digital Strategy
[To share your insights with us, please write to psen@itechseries.com ]
