Main Stage: Beyond the Limits: Transforming the SOC to Tackle Modern Challenges

No ratings

Presented at Black Hat USA 2025 by

Peter Prizio

Security Operations Centers (SOCs) face mounting challenges that threaten their ability to effectively protect organizations. Fragmented tools, limited data visibility, and a persistent skills shortage are creating barriers that prevent SOC teams from operating at their full potential. Analysts are forced to juggle disconnected workflows, maintain siloed tools, and wrestle with incomplete data—all of which slows responses and increases risk.The traditional approach to security operations is no longer enough. Current solutions rely on rigid architectures, restricted data ecosystems, and workflows that fail to address the needs of key SOC roles like detection engineers, incident responders, and threat hunters. These limitations leave organizations exposed and their teams struggling to adapt to the demands of modern security.In this session, we'll explore the systemic limitations holding SOCs back and why existing approaches fall short. We'll also share a forward-looking vision for the future of security operations—one that empowers teams to act on data wherever it resides, simplifies workflows across every SOC role, and scales to meet evolving challenges. To prepare for what's next, organizations must begin rethinking their approach to building a more unified and adaptable SOC.Open to all Pass types (excluding Summit-only Passes).