Radware AI SOC Xpert Now Covers New Use Cases To Drive Efficiencies

Rhea-AI Summary

Radware (NASDAQ: RDWR) on October 15, 2025 announced expanded capabilities for AI SOC Xpert, powered by EPIC-AI, extending coverage from Cloud DDoS to bot attacks, on-premise and hybrid DDoS, and application protection.

The update adds agentic AI root cause analysis, timeline and incident context within minutes, new dashboards for Application Protection and On-Premise DDoS, one-click enforcement, peacetime traffic profiling for proactive filters, and automated AI tuning aimed at reducing investigation fatigue and lowering mean time to resolution (claimed "up to twenty times").

Insights

Cybersecurity product strategist

Radware expands AI SOC Xpert to cover bot and on-prem DDoS use cases, promising major SOC efficiency gains.

Radware's AI SOC Xpert now adds agentic AI workflows for bot mitigation and on‑premise DDoS, plus unified dashboards across Application Protection and DDoS platforms. The product bundles root‑cause timelines, incident context, and one‑click enforcement into existing tooling, which directly addresses analyst toil by reducing manual correlation and tool switching.

Key dependencies include accurate peacetime profiling and low false positive rates for the automated tuning features; effectiveness rests on data quality and correct mapping of recommendations to enforcement actions. Watch adoption signals and customer case studies in the months after Oct 15, 2025 to validate the claimed MTTR reductions and to confirm the solution's behavior under real attack variability.

SOC operations lead

The release targets faster detection and remediation in live SOCs by automating investigation, remediation, and proactive filtering.

By delivering agentic guidance, forensic summaries, and visual dashboards integrated into DefensePro X and Cyber Controller, the offering shortens analyst workflows and centralizes decision data. Automated peacetime profiling and policy tuning aim to shift effort from reactive playbooks to proactive filter preparation, which can reduce repetitive manual work and investigation fatigue.

Risks include operational tuning effort and initial noise from automated recommendations; teams should validate AI suggestions in a controlled timeframe before full enforcement. Monitor false positive rates, time‑to‑deploy of recommended filters, and MTTR measurements over the next 30–90 days to assess real operational impact.

AI-driven incident remediation allows Security Operations Centers to better handle bot attacks, significantly improve root cause analysis and lower mean time to resolution

MAHWAH, N.J., Oct. 15, 2025 (GLOBE NEWSWIRE) -- Radware^® (NASDAQ: RDWR), a leading provider of cybersecurity and application delivery solutions, today announced expanded capabilities and coverage to its AI SOC Xpert. Less than a year ago Radware launched AI SOC Xpert for Cloud DDoS Protection, marking a milestone in embedding AI into Security Operations Center (SOC) operations to accelerate investigation, streamline remediation, and strengthen defenses. This next wave of AI SOC Xpert equips SOC teams with agentic AI capabilities that deliver broader coverage, deeper AI guidance, and measurable efficiency gains that empower SOC teams to investigate smarter, remediate faster, and prevent more effectively across multiple attack surfaces.

Powered by Radware’s EPIC-AI™, AI SOC Xpert now delivers root cause analysis, timeline, and incident context within minutes across both DDoS and bot attacks, providing analysts with the clarity they need to understand what happened and respond with speed and confidence, automatically and at scale. Whereas analysts previously relied on manual correlation or switching between tools, they can now access new dashboards for Application Protection and On-Premise DDoS Protection, along with significant AI enhancements to Cloud DDoS Protection. This unified view of what happened, why it matters, and how to respond reduces investigation fatigue and helps teams act faster under pressure thus reducing mean time to resolution (“MTTR”).

In addition to attack remediation, AI SOC Xpert can also be used during the attack prevention phase by profiling peacetime traffic to proactively prepare filters before attacks begin. This knowledge is used to recommend proactive tuning, refine protections, and support a positive security model that enforces policy more accurately when an attack begins.

“While the growing ecosystem of agentic capabilities provides vast opportunities for businesses, as AI systems gain autonomy the attack surface expands dramatically,” said Gabi Malka, chief operating officer, Radware. “Analysts have more to track and more complex root causes to analyze which contributes to down time as they seek to repair. Radware is extending AI SOC Xpert to further protect applications in an AI agentic world. Think of it as an AI agent for the SOC, reducing MTTR by up to twenty times.”

To help customers protect their brands and significantly reduce the time, effort, and costs in managing DDoS and application security incidents, enhancements to AI SOC Xpert include:

AI SOC Xpert for Application Protection

• Introduces AI-driven incident remediation for bot attacks, significantly improving root cause analysis and lowering MTTR.
• Visual dashboards that highlight anomalies, incidents, and attack patterns with clear, agentic AI-guided recommendations.
• Smarter continuous policy optimization with AI-driven tuning recommendations that reduce false positives and streamline WAF management.
• Automated workflows and context-optimized recommendations tailored to advanced bot activity, helping teams distinguish between legitimate automation and malicious bots.

AI SOC Xpert for DDoS Protection

• Supports on-premise, hybrid and cloud-based DDoS protection solutions.
• Introduces a new dashboard embedded directly into Radware’s DDoS protection platform, DefensePro X, and Cyber Controller.
• Uses peacetime traffic profiles to proactively prepare filters before attacks begin.
• Provides one-click enforcement options for real-time remediation, whether deployed inline or out-of-path.
• Expanded capabilities include agentic AI-powered forensic storytelling, structured summaries, and anomaly detection.
• Continuous monitoring of vectors, packet sizes, and traffic dynamics to accelerate detection and mitigation.

About Radware:

Radware^® (NASDAQ: RDWR) is a global leader in application security and delivery solutions for multi-cloud environments. The company’s cloud application, infrastructure, and API security solutions use AI-driven algorithms for precise, hands-free, real-time protection from the most sophisticated web, application, and DDoS attacks, API abuse, and bad bots. Enterprises and carriers worldwide rely on Radware’s solutions to address evolving cybersecurity challenges and protect their brands and business operations while reducing costs. For more information, please visit the Radware website.

Radware encourages you to join our community and follow us on: Facebook, LinkedIn, Radware Blog, X, and YouTube.

Any Radware products and solutions mentioned in this press release are protected by trademarks, patents, and pending patent applications of Radware in the U.S. and other countries. For more details, please see: https://www.radware.com/LegalNotice/. All other trademarks and names are property of their respective owners.

Radware believes the information in this document is accurate in all material respects as of its publication date. However, the information is provided without any express, statutory, or implied warranties and is subject to change without notice.

The contents of any website or hyperlinks mentioned in this press release are for informational purposes and the contents thereof are not part of this press release.

Safe Harbor Statement
This press release includes “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995. Any statements made herein that are not statements of historical fact, including statements about Radware’s plans, outlook, beliefs, or opinions, are forward-looking statements. Generally, forward-looking statements may be identified by words such as “believes,” “expects,” “anticipates,” “intends,” “estimates,” “plans,” and similar expressions or future or conditional verbs such as “will,” “should,” “would,” “may,” and “could.” For example, when we say in this press release that “our AI SOC Xpert solution can reduce "MTTR by up to twenty times” and that “as AI systems gain autonomy the attack surface expands dramatically”, we are using forward-looking statements. Because such statements deal with future events, they are subject to various risks and uncertainties, and actual results, expressed or implied by such forward-looking statements, could differ materially from Radware’s current forecasts and estimates. Factors that could cause or contribute to such differences include, but are not limited to: the impact of global economic conditions, including as a result of the state of war declared in Israel in October 2023 and instability in the Middle East, the war in Ukraine, tensions between China and Taiwan, financial and credit market fluctuations (including elevated interest rates), impacts from tariffs or other trade restrictions, inflation, and the potential for regional or global recessions; our dependence on independent distributors to sell our products; our ability to manage our anticipated growth effectively; our business may be affected by sanctions, export controls, and similar measures, targeting Russia and other countries and territories, as well as other responses to Russia’s military conflict in Ukraine, including indefinite suspension of operations in Russia and dealings with Russian entities by many multi-national businesses across a variety of industries; the ability of vendors to provide our hardware platforms and components for the manufacture of our products; our ability to attract, train, and retain highly qualified personnel; intense competition in the market for cybersecurity and application delivery solutions and in our industry in general, and changes in the competitive landscape; our ability to develop new solutions and enhance existing solutions; the impact to our reputation and business in the event of real or perceived shortcomings, defects, or vulnerabilities in our solutions, if our end-users experience security breaches, or if our information technology systems and data, or those of our service providers and other contractors, are compromised by cyber-attackers or other malicious actors or by a critical system failure; our use of AI technologies that present regulatory, litigation, and reputational risks; risks related to the fact that our products must interoperate with operating systems, software applications and hardware that are developed by others; outages, interruptions, or delays in hosting services; the risks associated with our global operations, such as difficulties and costs of staffing and managing foreign operations, compliance costs arising from host country laws or regulations, partial or total expropriation, export duties and quotas, local tax exposure, economic or political instability, including as a result of insurrection, war, natural disasters, and major environmental, climate, or public health concerns; our net losses in the past and the possibility that we may incur losses in the future; a slowdown in the growth of the cybersecurity and application delivery solutions market or in the development of the market for our cloud-based solutions; long sales cycles for our solutions; risks and uncertainties relating to acquisitions or other investments; risks associated with doing business in countries with a history of corruption or with foreign governments; changes in foreign currency exchange rates; risks associated with undetected defects or errors in our products; our ability to protect our proprietary technology; intellectual property infringement claims made by third parties; laws, regulations, and industry standards affecting our business; compliance with open source and third-party licenses; complications with the design or implementation of our new enterprise resource planning (“ERP”) system; our reliance on information technology systems; our ESG disclosures and initiatives; and other factors and risks over which we may have little or no control. This list is intended to identify only certain of the principal factors that could cause actual results to differ. For a more detailed description of the risks and uncertainties affecting Radware, refer to Radware’s Annual Report on Form 20-F, filed with the Securities and Exchange Commission (SEC), and the other risk factors discussed from time to time by Radware in reports filed with, or furnished to, the SEC. Forward-looking statements speak only as of the date on which they are made and, except as required by applicable law, Radware undertakes no commitment to revise or update any forward-looking statement in order to reflect events or circumstances after the date any such statement is made. Radware’s public filings are available from the SEC’s website at www.sec.gov or may be obtained on Radware’s website at www.radware.com. 

Media Contact:

Gina Sorice
GinaSo@radware.com

FAQ

What did Radware announce about AI SOC Xpert on October 15, 2025 (RDWR)?

Radware expanded AI SOC Xpert to cover bot attacks, application protection, on-premise and hybrid DDoS, with new dashboards and EPIC-AI enhancements.

How does the October 15, 2025 AI SOC Xpert update for RDWR improve incident response times?

The update adds agentic AI root cause analysis, timelines, and context within minutes and claims to reduce MTTR by up to twenty times.

Which deployments does the new AI SOC Xpert for DDoS protection support for RDWR customers?

It supports on-premise, hybrid, and cloud DDoS deployments and embeds a new dashboard into DefensePro X and Cyber Controller.

What proactive prevention features did Radware add to AI SOC Xpert on October 15, 2025?

AI SOC Xpert now profiles peacetime traffic to prepare filters before attacks, recommends proactive tuning, and refines protections to reduce false positives.

How does AI SOC Xpert address advanced bot activity according to the October 15, 2025 announcement?

It offers automated workflows, AI-guided recommendations, and context-optimized actions to distinguish legitimate automation from malicious bots.