Cisco adds AI red teaming and agent monitoring capabilities to enterprise security platform
Cisco has announced new capabilities across its AI Defense, Splunk and Cisco IQ platforms to help enterprises test AI agents for security vulnerabilities, monitor their performance and identify infrastructure risks.
The company is integrating Anthropic’s Claude Mythos into its AI Defense red-teaming framework to help security teams simulate complex, multi-step attacks against AI applications and agents before deployment. Testing will be restricted to registered and authorised targets, with operator authentication and audit trails. The capability is expected to be available to select enterprises soon.
Cisco is also expanding Splunk Agent Observability with tools to track AI agent costs against output quality. Its Tokenomics capability will use data from Amazon Bedrock and CloudWatch to link token consumption with agent performance and business outcomes. The company is also introducing evaluation models and a tuning tool that use agent activity traces and expert feedback to assess output quality and enforce guardrails. These evaluation capabilities are generally available, while Tokenomics is expected to enter private preview in December, ahead of a wider release in early 2027.
Separately, Cisco is integrating vulnerability, lifecycle and configuration data from Cisco IQ into the Splunk Platform. The integration will allow security teams to correlate live threat detections with exposed network infrastructure. Connectors for Model Context Protocol and ServiceNow will also help transfer exposure findings into asset-linked problem records for remediation.
“AI is shrinking the time organizations have to respond to threats, and knowing where you’re exposed only matters if you can act on it,” said Liz Centoni, Cisco EVP and Chief Customer Experience Officer. “Bringing Cisco IQ vulnerability insights into Cisco Data Fabric powered by the Splunk Platform gives analysts that context in the middle of an investigation, so they can decide what to do next. With our partners and Professional Services teams, we’re helping customers move from identifying risk to actually reducing it.”
The announcements come as enterprises expand the use of AI agents across business operations, increasing the need to monitor their security, performance and infrastructure dependencies.