Home / Companies / Box / Blog / Post Details
Content Deep Dive

Box AI cuts security triage from 30 minutes to seconds

Blog post from Box

Post Details
Company
Box
Date Published
Author
Kyle Cheek, Team Manager, and Andrew Kim, Analyst, Box Security Incident Response team
Word Count
1,079
Company Posts That Month
32
Language
English
Hacker News Points
-
Post removed?
No
Summary

Box’s Security Incident Response Team uses Box AI to automate portions of phishing, offboarding, and cloud-monitoring investigations that previously required extensive manual review. By analyzing email headers, message text, screenshots, and forensic artifacts concurrently, the system reduces tasks that once took roughly 30 minutes or longer to seconds or a few minutes, while escalating sensitive or ambiguous cases for human review. The team automatically closes 56% of phishing cases and manually reviews only about 30% of offboarding screenshots, with automated workflows covering 50–60% of ticket volume despite representing slightly more than 10% of alert types. Time saved from repetitive triage is being reinvested into additional automation and proactive, hypothesis-driven threat hunting intended to identify and prevent incidents before they escalate.

Trends Found in this Post

No tracked trend matches for this post yet.

Use This Data

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.