Skip to main content

Alert triage agents

Alert triage agents decide whether related alerts belong together and assign a priority to each triaged alert.

Perpetual launches a routing agent to compare each new alert with other alerts awaiting triage in the same Space. The agent either merges the alert into an existing alert or keeps it separate, then records the routing reason in the alert's audit log. Perpetual launches a scoring agent to assign a priority from 1 to 10 and write a summary from the accumulated signal evidence and the detection's response instructions. The alert triage workflow uses that score to decide whether to promote the alert to a case.

  • Background agents, the category for bounded agentic jobs that Perpetual launches from product workflows.
  • Alert triage, the process that routes, scores, and promotes alerts.