u/PromotebnxdvinNo2282

MDR can do more than investigate and escalate alerts. Depending on the agreement, the provider may also contain threats by isolating endpoints, disabling accounts, or taking other pre-authorized actions.

But a serious incident can involve decisions beyond those agreed actions: whether to take a critical service offline, how to preserve evidence while restoring operations, and when to involve legal, leadership, or customer communications. Someone needs to own those decisions and coordinate the wider response.

The handoff should be defined before an incident, not negotiated during one.

For teams using MDR, which response actions can your provider take without waiting for approval? What triggers involvement from your internal incident owner?

Prey still has one of the best atmospheres in an immersive sim. Talos I feels genuinely creepy, and the environmental storytelling makes exploring it worth it.

What’s your favorite part of the game?

We've got a handful of internally built AI applications now live (a couple of customer-facing chat features, one internal copilot-style tool) and I'm not convinced our normal AppSec process covers what's actually risky here. Our standard SDLC checklist wasn't written with a prompt injection or a model behaving unpredictably in mind, and I don't think a generic pen test vendor is going to know what to poke at.

Trying to figure out what a real AI security review should include beyond the usual web app checklist: prompt injection and jailbreak testing, how data flows into and out of the model, whether the app leaks anything through its outputs it shouldn't, and whether there's an actual governance framework behind who's allowed to stand up a new AI feature in the first place versus it just happening in a sprint. Also curious whether anyone's separated "AI governance" (the policy side) from "AI penetration testing" (the technical side) as two different engagements, or if that's overkill for a mid-size security team.

Not looking for a vendor pitch thread, looking for what people who've actually gone through this found worth paying for versus what turned out to be checkbox theater.