7AI gives security teams new ways to direct AI agents for threat hunting

7AI has launched three new capabilities designed to give security teams more control over how AI agents investigate threats, use threat intelligence, and adapt to specific customer environments. The new features, Threat Hunt, Threat Intel Hunt, and Skills, are aimed at moving security operations beyond alert response and into more proactive investigation.

Threat Hunt lets analysts describe a suspected technique, behavior or MITRE ATT&CK tactic in plain language. The platform then builds a hunt plan, runs the investigation across live customer telemetry, and returns findings in minutes. The response workflow can be adjusted based on customer requirements, including fully automated responses or analyst-approved recommendations.

Threat Intel Hunt connects threat intelligence sources to autonomous investigations. As new indicators, attacker techniques, or TTPs emerge, the platform checks them against the customer environment and opens an investigation when relevant activity is found. The goal is to help teams act on intelligence faster, instead of waiting for someone to manually review a feed and run a search.

The company also introduced Skills, which lets security teams build and deploy their own investigation and response methods inside the platform. That matters for MSSPs and security teams because agentic security tools are becoming less about generic automation and more about how well they can reflect each customer’s environment, policies, and risk tolerance. 7AI said its agents have completed more than 7 million investigations in production, and the new capabilities were used by its PLAID ELITE managed service team to hunt for CRXfiltrate, an undocumented Chrome extension backdoor that had operated without public indicators or threat feed coverage.