Inside SECNAP: An Agentic MDR Platform Built on LimaCharlie
Joshua Strickland from SECNAP shows how his team built a full agentic MDR platform on top of LimaCharlie. SECNAP layers its own customer portal and SOC workflows directly on LimaCharlie's API, giving AI agents the same access to telemetry and response actions as a human analyst.
Joshua will walk you through the customer portal, the SOC dashboard, and a live attack simulation on a sandboxed machine, including how AI agents handle tier one and tier two triage with Sonnet and Opus, and how a human analyst reviews and approves response actions before anything ships.
You'll see:
- How SECNAP moved from a patchwork of open source tools to a single API-driven foundation
- A live, hands-on-keyboard attack simulation triaged in real time by AI agents
- How human analysts review, approve, and take over response actions when needed
- How SECNAP manages AI agent costs at scale across a 24/7 operation
- What surprised the SECNAP team most during implementation