Deepwatch, which makes Precision MDR [Managed Detection and Response] powered by AI and humans, has announced Deepwatch NEXA. NEXA is the industry’s first collaborative Agentic AI ecosystem delivering outcome-focused agents that transform how MDR providers and customers work together. NEXA connects human expertise, AI intelligence, and customer context into a single, unified experience, to deliver real-time visibility, context, and actionable insights across the entire security lifecycle. This enables both MDR providers and customers to detect, investigate, and respond to threats faster by turning complex security data into clear, actionable intelligence that accelerates decision-making and improves overall security posture.
“Deepwatch has always delivered Managed Detection and Response as a human-led, collaborative service,” said Anand Ramanathan, Deepwatch’s Chief Product Officer. “What’s new with NEXA is the scale and depth of that collaboration. We’ve evolved from analysts assisted by automation to analysts and AI agents working together with customers in real time. Precision MDR means using AI to bring accuracy and context to every detection and decision, while still keeping human judgment at the core.”
Deepwatch NEXA, the company’s AI ecosystem, expands from three to six with the addition of three new customer experience agents that complement Deepwatch’s existing SOC-focused agents – Investigative, Narrative, and Response. These enrich data, narrate findings, and drive rapid containment.
“NEXA is Deepwatch’s Agentic AI ecosystem that connects our human experts, customers, and AI agents through a shared intelligence layer,” Ramanathan said. “We have built six AI agents for conducting specific tasks and workflows. These agents use the power of AI reasoning and learning to continuously analyze telemetry, alerts, and threat intelligence to provide context, prioritize risk, and recommend or execute next steps, always with human oversight. In short, NEXA turns fragmented data into clear, real-time visibility, insight, and coordinated action across the MDR lifecycle.”
This dual-use case strategy – one advancing AI in the SOC and the other enhancing the customer experience – demonstrates how NEXA unifies intelligence across the security lifecycle. Together, these six agents empower security teams and business leaders to transform complex data into decisive, risk-informed action.
“This means that for the first time, AI is being used to connect the provider and the customer, not just to automate internal SOC tasks,” Ramanathan emphasized. NEXA’s collaborative agents work across detection, investigation, and response while also communicating findings and recommendations in plain language that customers can easily understand. This creates shared situational awareness where the MDR provider and customer see the same data, understand the same context, and make decisions together.
The addition of three new agents raise the total to six overall.
“NEXA now includes six specialized AI agents, expanding our original capabilities,” Ramanathan indicated. “The three new ones are customer experience AI agents – CTEM, Detection, and Ticket Analyzer. They round out our AI ecosystem that already includes our SOC agents (Investigative, Narrative, and Response).
The CTEM Agent provides real-time visibility into exposure and readiness, generating insights and board-level reporting that link technical risk to business impact.
The Detection Advisor Agent continuously optimizes detection coverage, aligned with the MITRE ATT&CK framework and real-world adversary campaigns.
The Ticket Analyzer Agent automates case analysis, correlates related alerts, and summarizes investigations with recommended next actions.
The three pre-existing agents include Investigative Agent, which enriches data and executes investigation steps to pull in relevant context automatically. It also includes Narrative Agent, which converts investigation data into clear, human-readable summaries for analysts and customers, and Response Agent, which works collaboratively with analysts to coordinate containment and remediation activities quickly and safely.
‘Together, these six agents form a connected ecosystem that enhances how Deepwatch delivers MDR,” Ramanathan said.
Building on this foundation, NEXA’s three new customer experience agents work collaboratively to elevate security outcomes, extend the power of AI beyond the SOC, and enable end-to-end intelligent security operations. Each agent addresses a critical capability gap in modern security operations. Overall, NEXA addresses critical challenges facing modern enterprises by enabling organizations to democratize security outcomes, unifying insights from disparate tools and sources to provide a complete view of an organization’s security posture.
“Traditional MDR relies on reports and dashboards that customers must interpret after the fact,” Ramanathan said. “With NEXA, any stakeholder can query their environment in plain English and instantly see risk exposure, detection coverage, and current response activity. This turns MDR into an interactive experience wherein customers no longer just receive information; they participate in real-time understanding and decision-making alongside the Deepwatch team.”
As NEXA processes new data and customer context, it learns which patterns indicate exposure, which detections are most effective, and where controls can be improved. This learning enhances Deepwatch’s ability to detect threats proactively and keeps customers’ defenses aligned with the changing threat landscape. For customers, this means an MDR experience that gets smarter, more adaptive, and more precise each day. For Deepwatch analysts, it means higher quality insights and faster, data-driven actions backed by full transparency.
“Response traditionally requires multiple handoffs between systems and people,” Ramanathan indicated. “NEXA unifies telemetry, tickets, and workflows into a single context. AI agents can automatically connect advisories, cases, and response playbooks, ensuring actions happen faster and with full visibility. The change is in speed, clarity, and coordination with every step being transparent to both analysts and customers. Threats evolve too quickly for full automation to be trusted without context. NEXA uses human-guided autonomy, where AI handles correlation, summarization, and recommendation, and humans validate and act on what matters most. This model balances speed, accuracy, and accountability. AI scales the work, and the human ensures the decision is right.”
NEXA addresses critical challenges facing modern enterprises by enabling organizations to: democratize security outcomes, unifying insights from disparate tools and sources to provide a complete view of an organization’s security posture. Empower anyone to explore data, ask questions in plain English, and make faster, smarter decisions; continuously improve posture and coverage: Identify exposures, coverage gaps, and detection priorities in real time; accelerate decision-making, where you go from hours of analysis to seconds of insight; sStreamline response and operations to drive stronger security programs.
“Security teams are drowning in data but starving for transparency and actionable insights,” Ramanathan said. “NEXA changes that paradigm completely. By giving our analysts and customers shared, real-time intelligence in natural language, threats are contained faster, posture is improved, and customers get outcomes that they can immediately understand and trust.”
For technical decision makers, NEXA eliminates fragmented visibility across tools and data sources, automates manual MITRE mapping and validation that slows investigations, and eliminates manual workload that drives fatigue and delays. It also provides limited automation for contextual analysis and response. For business decision makers, NEXA provides clarity on how technical gaps impact business risk, eliminates manual SQL-based querying that slows decision making, and delivers instant visibility into ROI, coverage, and risk alignment—making board-ready insights available at a moment’s notice.
“Deepwatch works with a growing ecosystem of partners, including technology alliances, resellers, and systems integrators,” Ramanathan stated. “Our approach to partnerships mirrors our approach to MDR – collaborative and outcome-oriented. We integrate with partner technologies and service providers to deliver unified visibility and faster time to value for customers.
Ramanathan indicated how partners will be impacted by NEXA.
“NEXA strengthens our partner ecosystem by giving partners greater visibility and shared intelligence across customer environments,” he said. “It allows technology and service partners to plug into the same intelligence layer, making collaboration on detection, response, and reporting smoother and more effective. Ultimately, NEXA helps partners deliver better, faster, and more transparent outcomes for their customers, aligning everyone around the same data and the same goals.”
Deepwatch NEXA is available this quarter.