The Ghost in the Pager
The SOC has been “about to change forever” for so long that permanence is now its defining feature.
Transformation is promised annually, like a gym membership or a political reform. Nothing happens. The dashboards multiply. The humans age. The pager remains, vibrating softly like an anxiety disorder with an SLA.
This year’s miracle wears a new mask. It speaks in the language of intent and inevitability. It does not automate. It decides. It does not trigger. It reasons. It does not fail. It learns.
This is all very moving if you’ve never tried to reconcile three identity providers at scale.
What’s being sold here is not intelligence. It’s absolution.
The fantasy isn’t that machines can think. The fantasy is that someone else will be responsible when they act.
Because the work hasn’t changed. The work is still the work. Ingest garbage. Normalize lies. Correlate coincidences. Guess intent from telemetry designed by committees and implemented by interns. Respond inside environments that mutate faster than documentation and punish certainty more than hesitation.
Calling this autonomy is like calling a spreadsheet a legal system.
There is no mind here. There is no understanding. There is only state management under extreme entropy, pretending to be cognition because marketing discovered philosophy and hasn’t shut up about it since.
The word “agent” is doing an absurd amount of emotional labor.
“Automation” scared people. Automation had consequences. Automation showed up in court exhibits. “Agent” sounds thoughtful. Moral. Like it paused. Like it weighed the options. Like it could be blamed without anyone going to jail.
When something detonates, the postmortem language is always identical.
“It decided to isolate the host.”
No. The environment fractured. The assumptions cascaded. And entropy, as always, won on points.
This isn’t consciousness. It’s Kafka with a GPU. Bureaucracy achieving escape velocity. Paperwork moving so fast it briefly convinces executives it has a soul.
We’ve already run this con in different costumes. Orchestration was supposed to end toil. Correlation was supposed to reveal truth. Consolidation was supposed to create clarity. Outsourcing was supposed to buy sleep.
Each time, the same result: fewer alerts, bigger explosions, and a stronger belief that the next abstraction layer will finally understand what the last one could not.
It never does.
The only things that actually help are aggressively unsexy. Memory that survives shift change. Context that doesn’t evaporate at 9 a.m. Systems that admit uncertainty instead of cosplaying authority. Narratives that reduce panic instead of amplifying it.
These things do not demo well. They do not sound sentient. They do not justify valuation.
The real limit isn’t capability. It’s courage. Autonomy dies the instant someone senior asks why a decision was made and the answer turns into interpretive dance about probabilities and vibes.
At that moment, philosophy evacuates and the pager finds a human spine.
This will ship. It will work just often enough to be dangerous. It will fail loudly enough to be memorable. And every time it does, someone will materialize to say, “That’s not what it meant.”
That sentence is the most stable interface in cybersecurity.
This isn’t a revolution. It’s a sedative. A story told to exhausted teams so they can keep operating inside systems that were never designed to be understood — only survived.
Nothing has replaced the analyst.
The anxiety has just been refactored.
And the pager, immortal as ever, has learned a new name to whisper at 3 a.m.
Threat intelligence every morning — new victims, new groups, what matters, in plain English. Free, with receipts.
Subscribe to the Daily →
Scott Gardner ·