Proofpoint Banks on Intent‑Based Detection
Managed service providers (MSPs) are facing a new wave of cyberattacks that look indistinguishable from everyday business activity. At the Protect26 conference, Proofpoint Inc. unveiled a major shift in its security strategy, introducing Agentic Collaboration Security, a solution built on intent‑based detection designed to stop malicious activity hidden inside normal workflows across email, collaboration tools, and the browser.
Proofpoint CEO Sumit Dhawan said MSPs are confronting a rapidly evolving threat landscape where attackers increasingly exploit legitimate business interactions. “The novelty gap has always been there with QR codes and click‑phish campaigns,” he said. “But with AI now a fundamental tool for attackers, the gap has changed. We need to take a big leap forward to protect this environment.”
The company’s new Agentic Collaboration Security system applies progressively deeper AI reasoning before delivery and continues protection inside the inbox. The goal is simple: stop sophisticated attacks through one connected defense, combining threat intent, investigation, and user‑risk analysis so organizations can detect attacks earlier, understand them faster, and respond before damage occurs.
A major shift driving this innovation is how enterprise workflows have changed. Traditional business applications such as CRM, HR systems, and others have historically created isolated islands of data. But AI agents no longer rely on these workflows. They interact directly with data, making applications effectively “headless” and creating new opportunities for attackers to manipulate automated processes.
Proofpoint’s approach centers on three pillars:
- Zero‑Tech Detection to identify known and unknown risks without manual controls, increasing detection confidence.
- Instant Investigation to eliminate alert fatigue and automate decision governance.
- Optimized Protection to right‑size controls, refine data access, and continuously learn from user behavior.
At the foundation of Agentic Collaboration Security is the Proofpoint Knowledge Graph, which merges threat intelligence on active campaigns, industry attack patterns, and compromised suppliers with organizational context such as communication patterns, business relationships, data access, and user risk.
Layered on top is the Nexus Intent‑Based Detection Model, which uses multi‑stage analysis to interpret the purpose behind each interaction. Most decisions resolve in under half a second, while ambiguous cases receive deeper reasoning to determine whether a message’s objective is plausible. Together, the Knowledge Graph and Nexus model create a shared intelligence layer that informs detection, investigation, and user protection across all control points.
Proofpoint also announced Advanced Browser Protection, built in partnership with Boston‑based Push Security Inc., integrating email threat intelligence with browser‑native identity threat detection.
For channel partners, Agentic Collaboration Security will roll out in the first quarter of 2027 as an update to Proofpoint’s collaboration security solution.
About Author
