7AI Commercial and Professional Services United States Company newsroom

DXC Technology

Security and Compliance

DXC's security operations center had to protect a global enterprise with more than one million devices, while analysts were spending up to 80% of their time reviewing false positives and performing routine investigations instead of focusing on threat hunting and complex cases.

67.5% reduction in investigation time
99% of alerts automated
Greater than 95% remediation accuracy
More than 225,000 hours of SOC analyst time saved

Reported impact

Business outcome

DXC automated most repeatable alert investigations, reduced investigation time, improved remediation accuracy, saved analyst hours, produced audit-ready incident documentation, and freed analysts to focus on higher-value work such as threat hunting and intelligence.

  • Compliance
  • Productivity Improvement
  • Risk Reduction
  • Scalability

Solution

DXC deployed DXC Agentic SOC, powered by 7AI, across its own global security environment to automate first-line SOC investigations at enterprise scale. Security alerts generated across more than one million devices are fed into the platform, where autonomous agents investigate them in parallel instead of sending every repeatable case to analysts. The system uses AI reasoning to execute routine investigation work, correlate evidence from across DXC's security environment, and produce clear, evidence-based findings for human review. DXC's cybersecurity teams review those investigations in production and use the feedback to improve agent capabilities and investigation strategies over time. The source does not disclose the persistent storage tier, but it does describe an optional integration with DXC OASIS to connect cyber and IT operations, provide real-time visibility across the wider IT estate, and shorten the path from threat detection to remediation.

Data flow

Security alerts from DXC's global environment of more than one million devices enter DXC Agentic SOC, where 7AI-powered autonomous agents investigate high-volume cases in parallel, correlate evidence across the security environment, and return evidence-based findings and audit-ready documentation to analysts. When connected, DXC OASIS extends that output into a wider IT operations view to accelerate remediation.

Solution architecture

2 components · 2 layers
  1. Compute
    • 7AI Provides the agentic AI reasoning that powers parallel alert investigation and repeatable triage work.
  2. Orchestration
    • DXC Agentic SOC Runs autonomous SOC investigations, correlates evidence across the security environment, and returns evidence-based findings to analysts.

Architecture clues

  • Can integrate with DXC OASIS for a unified cyber and IT operations view
  • Cybersecurity teams review live investigations and feed results back to improve agent capabilities and investigation strategies
  • Deployed across DXC's own global security environment as Customer Zero
  • Investigates alerts in parallel
  • Protects an enterprise with more than one million devices

Evidence from the source

"67.5% reduction in investigation time"
"99% of alerts automated"
"Greater than 95% remediation accuracy"
"It investigates alerts in parallel, correlates evidence from across the security environment and gives analysts clear, evidence-based findings."
"More than 225,000 hours of SOC analyst time saved"
"The solution uses autonomous investigation and AI reasoning to handle high-volume, repeatable alert work."
"We deployed DXC Agentic SOC, powered by 7AI, across our own global security environment."
"analysts were spending up to 80% of their time reviewing false positives and carrying out routine investigations"
Transparency Evidence & methodology 100/100 reference value · 94% confidence · 1 source

Review how this reference was scored and trace each normalized claim back to its documented source.

01

Scoring methodology

How scores are calculated

Customer Reference Value measures usefulness as a customer reference. Evidence Confidence measures the quality and traceability of available evidence, not independent verification.

Customer reference value100/100
  • Problem clarity20/20
    Measures whether the customer's operational problem is specific enough to compare.
  • Implementation depth25/25
    Rewards named components, data flow, integrations, and architecture detail.
  • Outcome specificity20/20
    Measures whether the reported benefit is concrete rather than a generic claim.
  • Quantified impact25/25
    4 metrics describe measurable impact.
  • Deployment scale10/10
    Rewards evidence of a live or scaled deployment and meaningful integration scope.
Evidence confidence94%
  • Source authority25/25
    The deployment is described by the adopting organization or a government source.
  • Claim traceability21/25
    10 of 12 key fields link to a named source.
  • Direct evidence20/20
    8 direct source quotes retained.
  • Date provenance10/10
    The publication date comes from the source page or publisher.
  • Source transparency8/10
    1 source reference document publisher, URL, authority, retrieval, and supported fields.
  • Implementation specificity10/10
    Rewards source-backed components, data flow, quantified impact, and a specific outcome.
02

Traceability

Sources & provenance

Field coverage shows which facts each source supports. Dates are shown only when documented by the source.

  1. DXC Technology

    DXC Technology customer story

    First-party
    https://dxc.com/insights/customer-stories/dxc-agentic-soc-automating-security-alerts
    Source type
    Customer-published story
    Published
    Sep 7, 2026
    Supports
    • Customer
    • Business problem
    • Solution
    • Products
    • Solution components
    • Data flow
    • Integrations
    • technical area
    • use case category
    • Business outcome
    • outcome category
    • Metrics
    • Architecture
    • evidence quotes
    • Publication date

Date evidence

  • Published on source page Sep 7, 2026 · DXC Technology · First-party
    Open date source
Not separately sourced Industry, Region, Company size. Treat these normalized attributes as lower-confidence until a dedicated source is added.