In this episode, Ahmed Achchak (CEO & co-founder of Qevlar AI) sits down with Erik Bloch, VP of Security at illumio and former SOC leader at Salesforce and Atlassian, to explore how AI is blurring the traditional divide between MSSP and enterprise SOCs.Erik breaks down why MSSPs operate like standardized, metric-driven service products, while enterprise SOCs remain bespoke, and how autonomous AI might flip the script.You’ll discover:→ Why AI fits naturally into MSSP workflows but struggles in enterprise SOCs (and what is needed to fix it for maximum results)→ What MSSPs get right about process and measurement and what enterprises can learn from it→ How autonomous agents could unlock deep personalization at scale for MSSPs→ The people and process blockers holding back AI adoption in the enterprise→ Why phishing is still every SOC’s biggest time sink and how AI can actually help→ What vendors overhype about AI and what they should focus on insteadAgenda:00:00 – Intro: How AI blurs the MSSP vs. enterprise SOC line03:21 – Where AI fits today and where it fails03:57 – MSSPs run on process; enterprises run on chaos06:36 – Can autonomous AI personalize without breaking scale?07:12 – Remove the haystack vs. hunt the needle10:58 – What AI can offload to help SOC teams do real work12:17 – Why phishing still dominates SOC workload13:46 – Fire Round: One alert type to ban forever18:47 – What MSSPs and enterprises should learn from each other19:30 – The AI pitch vendors love that nobody actually needsFollow Erik Bloch on LinkedIn:https://www.linkedin.com/in/erikbloch/Follow Ahmed on LinkedIn:https://www.linkedin.com/in/ahmed-achchak-872554109/Learn how Qevlar AI automates alert investigation so your analysts don’t burn out: www.qevlar.com

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related