The agentic security delivery frontier
Reviewed by ContraForce team · Updated
Blog
Industry analysis, product deep-dives, and announcements.
Featured
Announcement
Your Security Delivery Agent can now review detection rules
Start an agent rule review from a Microsoft Sentinel scheduled or NRT analytics rule, or from a Defender XDR custom detection. Your Security Delivery Agent reads the rule's recent incidents and recommends whether and how to change it, with the detection coverage risk and a validation plan for your team to weigh.
Oct 29, 2026
4 min read
Guide
How to govern AI agents in incident response
An AI agent that can isolate a device or reset a password needs controls that still hold when it's wrong. See how ContraForce's gates stack before a Gamebook runs, and how to review, audit, and widen what agents may do.
Oct 29, 2026
11 min read
Announcement
Introducing the Sumo Logic detection module: monitor alerts become incidents
Sumo Logic monitor alerts now open as ContraForce incidents, in the same queue as the rest of your customers, where Security Delivery Agents can investigate them too.
Oct 1, 2026
4 min read
Announcement
Introducing Agent Policies and Agent Shifts: Control What Agents Investigate and When
Decide which incidents Security Delivery Agents may investigate and schedule their automatic working hours with Agent Policies and Agent Shifts.
Sep 14, 2026
4 min read
Announcement
Introducing the Content Management Center: version control for your detection content
The Content Management Center gives every Sentinel analytics rule and Defender XDR custom detection one definition, one version history, and a record of which workspaces have drifted from it. Detection content stops being something edited live in a customer's tenant by whoever had the console open.
Aug 29, 2026
5 min read
Announcement
Fleet management is live: Workspace Profiles and onboarding at scale
In a per-workspace console, every configuration decision is multiplied by the size of your book. A Workspace Profile is your delivery standard written down once, and apply brings your attached workspaces to it after showing you, workspace by workspace, what it will change.
Aug 21, 2026
5 min read
News
Microsoft features ContraForce in Judson Althoff's Frontier Transformation blog
Judson Althoff, CEO of Microsoft Commercial Business, featured ContraForce in his quarterly Frontier Transformation post and described the platform's role in managed security delivery.
May 3, 2026
4 min read
Industry
Why MSSPs Are Hitting a Margin Wall
Revenue scales with customers. Cost scales with customers. Most managed security practices are quietly subsidizing security with their other services, and the board is starting to notice.
Apr 15, 2026
6 min read
Industry
The Case for Microsoft-Native MXDR
For MSPs serving Microsoft 365 customers, the most valuable security stack is the one already deployed. Replacing it is not the answer; automating it is.
Mar 12, 2026
7 min read
Announcement
The ContraForce Agentic Security Delivery Platform is live
Years in the making. Built with Microsoft. An agentic platform that runs governed security delivery from triage through customer-ready reporting. Purpose-built for Microsoft MSPs.
Dec 15, 2025
5 min read
See it run on your own incidents.
Connect one supported workspace, validate access and your Gamebook, then measure an eligible investigation in your own environment.
No credit card. Connect one workspace: scoped Entra ID application consent, no endpoint agents, no log forwarding.