The buzz from 🔗CrowdStrike’s Fal.Con 2025 conference was impossible to miss. One of the central themes in the security landscape was around how adversaries are weaponising AI to automate attacks, scale their operations, and breach networks with staggering speed.
In response, the industry is focused on autonomous, AI-driven defence. AI is becoming a core foundation in cybersecurity with AI agents autonomously detecting, responding and even predicting threats. This tech is provided by platform consolidation and unified data models like 🔗CrowdStrike’s own solutions. As a CrowdStrike partner, we see the power of these tools every day.
Is human judgement still important?
AI platforms in cyber are designed for speed, rapidly identifying anomalies and neutralising threats in minutes, or even seconds. But, this speed does present a challenge – an autonomous agent can lack a vital component in human judgement. Like a self-driving car slamming on the brakes for a harmless piece of debris, it misidentifies it as a critical obstacle. The car is technically ‘safe’, but the action is disruptive and lacks the nuanced judgement a human driver might bring to the mix.
Imagine AI cyber tools flagging a legitimate, but unusual activity from your finance director as a high-priority threat creating a false positive and ultimately business disruption. AI can tell you what happened, but it can’t always explain why that activity might align with an operational need.
Essentially, at Mondas we see the technology as a powerful tool to add to our kit, but it still needs to be managed by an expert hand.
Human-in-the-Loop
This is where the ‘human-in-the-loop’ (HITL) model becomes a useful way of shaping thinking. At Mondas, we’ve built our entire service philosophy on this hybrid approach. We combine the best-in-class AI-driven technology of partners like CrowdStrike with an irreplaceable human element.
The AI platform does the heavy lifting, like sifting through billions of events in real-time, our expert analysts provide the layers of oversight, context, and strategic decision-making that no algorithm can replace.
When an alert is triggered, it’s investigated by a real person who may be sitting at a desk in our Security Operations Centre, based in Farnborough, UK. Our certified analysts are an extension of your team, there to validate the threat and manage the response. When you have a question or a concern you can pick up the phone and speak directly to the analyst who is handling your case 24/7.
AI is the future of security
The key insight from Fal.Con 2025 isn’t just that AI is the future of security; it’s that the implementation of that AI is what determines success or failure.
You can’t just buy a sophisticated platform and expect it to be effective to your needs. True cyber resilience comes from a partnership. It’s the fusion of autonomous AI speed with human-led wisdom, context, and accountability.
The technology is the engine. Our team is the expert driver, minding your business to allow you to focus on what you do best. Get in touch to talk about how we can help your organisation stay ahead of the curve.
This article was written by Lance Nevill, our Cyber Security Director at Mondas. Lance works with organisations towards their compliance and overall security posture, learn more about Lance on 🔗LinkedIn here.
Last updated 13/11/2025
