{"id":6035,"date":"2026-10-11T14:27:57","date_gmt":"2026-10-11T19:27:57","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6035"},"modified":"2026-10-11T14:27:57","modified_gmt":"2026-10-11T19:27:57","slug":"agentic-netops-october-11-2026","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6035","title":{"rendered":"Agentic NetOps &mdash; October 11, 2026"},"content":{"rendered":"<style>\n.single .entry-title,\n.single .entry-header .entry-title,\n.single .post-title,\n.single header.entry-header h1,\n.single h1.entry-title,\n.single .page-title,\n.post-template-default h1.entry-title,\n.post-template-default .entry-header,\narticle .entry-header,\narticle .entry-title { display: none !important; }\n.single .entry-header { margin: 0 !important; padding: 0 !important; }\n.single .entry-content { margin-top: 0 !important; padding-top: 0 !important; }\n<\/style>\n<table role=\"presentation\" class=\"wrapper\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n<tr>\n<td align=\"center\">\n<table role=\"presentation\" class=\"container\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"680\">\n<p>        <!-- Banner --><\/p>\n<tr>\n<td class=\"banner\" style=\"background-color:#312e81;background:linear-gradient(135deg,#312e81 0%,#4338ca 100%);padding:36px 32px;color:#ffffff;\">\n<p class=\"date\" style=\"color:#ffffff !important;\">October 11, 2026 &middot; Weekly Edition<\/p>\n<h1 style=\"color:#ffffff !important;\">Agentic NetOps<\/h1>\n<p class=\"tagline\" style=\"color:#ffffff !important;\">HPE&rsquo;s networking chief says AI will soon close every network ticket without a human, but buyers in two new surveys still want to approve the changes. Elliott and Siris are exploring a $2 billion-plus sale of Gigamon. LogicMonitor connected its AI to ServiceNow&rsquo;s agents, an analyst called NETSCOUT&rsquo;s copilot table stakes and its data the real asset, and Netskope started selling agents from a shared credit pool.<\/p>\n<\/td>\n<\/tr>\n<p>        <!-- At a glance --><\/p>\n<tr>\n<td class=\"content\">\n<h2>This week at a glance<\/h2>\n<p>The biggest claim of the week came from <strong>HPE<\/strong>. Rami Rahim, who runs HPE Networking, told The Register that 70&ndash;80% of network tickets already need no human, and that &ldquo;within two to three years, we&rsquo;ll have no issues that require humans.&rdquo; HPE&rsquo;s own product marketing was more careful. Its Marvis assistant takes autonomous action only where the customer opts in, and on other vendors&rsquo; equipment it &ldquo;often operates in a driver-assist mode,&rdquo; diagnosing and recommending rather than fixing. The ambition is full autonomy, but it currently works best in an all-HPE network. For any vendor selling into mixed estates, that is the opening.<\/p>\n<p>The demand data tempers the vendor claims. <strong>Riverbed<\/strong>&rsquo;s survey of 1,200 IT leaders found 90% intend to pursue autonomous IT operations, but 77% won&rsquo;t let AI make operational decisions without human approval, and only 19% of IT operations are automated today. <strong>EMA<\/strong>&rsquo;s research, reported by Network World, found enterprises running six to eight observability tools and only 17% finished consolidating them. EMA also found that organisations with centralised tool governance use AI more maturely. Spiceworks asked the people deploying network agents and got the same answer: agents are useful for finding problems, but are &ldquo;not ready to run your network on their own.&rdquo; One founder said the biggest failure point is the operating model around the agent, not the model itself.<\/p>\n<p>The commercial moves were about where agents connect and how they are paid for. <strong>LogicMonitor<\/strong> made its Edwin AI callable by ServiceNow&rsquo;s own agents, which puts the incident record, not the monitoring console, at the centre of the workflow. A Futurum analyst said a copilot on an observability platform is now a &ldquo;parity feature&rdquo; and that <strong>NETSCOUT<\/strong>&rsquo;s real asset is the network data under it. <strong>Netskope<\/strong> replaced per-agent purchasing with one pool of committed credits, and Gluware partner Vandis now sells network patch automation as a recurring managed service. Capital is also moving: <strong>Elliott<\/strong> and Siris are exploring a sale of Gigamon at more than $2 billion, on reported ARR above $400 million. Buyers are not paying for autonomy as such. They are paying for verified data, for working inside the workflow they already use, and for commercial terms that limit their risk.<\/p>\n<div class=\"watchlist\">\n<h2>On our watch list<\/h2>\n<ul>\n<li><strong>LogicMonitor Elevate, Chicago, October 13&ndash;14.<\/strong> The theme is &ldquo;Autonomous IT,&rdquo; and the Autonomous IT Innovation Program has been in private preview since May. Watch for general availability, pricing, and a named customer letting Edwin AI remediate rather than only investigate.<\/li>\n<li><strong>SolarWinds Day, October 14&ndash;15.<\/strong> SolarWinds is presenting &ldquo;goal-oriented AI.&rdquo; It is the next large monitoring incumbent to state how far it will let agents act, and whether it ties that to ServiceNow the way LogicMonitor has.<\/li>\n<li><strong>Who bids for Gigamon, and at what multiple.<\/strong> Reported ARR is above $400 million and EBITDA about $170 million, against a $2 billion-plus target. A strategic buyer from observability or security would signal that network data is being folded into larger platforms. A private-equity buyer would set a price marker for network visibility software.<\/li>\n<li><strong>Evidence behind HPE&rsquo;s 70&ndash;80% figure.<\/strong> Rahim&rsquo;s number is a claim, not a published metric. Watch for a named customer&rsquo;s ticket data beyond the UK Ministry of Justice&rsquo;s roughly 75% service-desk reduction cited in May, and for whether HPE&rsquo;s opt-in autonomous actions extend to other vendors&rsquo; equipment.<\/li>\n<li><strong>Whether Riverbed&rsquo;s 77% starts to move.<\/strong> The next autonomy surveys will show whether the share of buyers requiring human approval falls. A vendor that publishes how many customers moved from approval to autonomous actions would have the first hard adoption data in the category.<\/li>\n<li><strong>Copycats of Netskope&rsquo;s credit pool.<\/strong> Netskope now sells SOC and NOC agents from one pool of committed credits. Watch Netskope&rsquo;s next earnings call for AgentSkope consumption figures, and whether the networking incumbents move from per-device or per-agent pricing to consumption pricing.<\/li>\n<li><strong>NETSCOUT moving from answering to acting.<\/strong> Futurum&rsquo;s open question is whether nGenius Copilot moves from recommendations to guided remediation, and whether NETSCOUT publishes accuracy and grounding evidence. Neither has happened yet.<\/li>\n<li><strong>More agent-to-agent links into ServiceNow.<\/strong> LogicMonitor&rsquo;s six Edwin AI capabilities are now callable by ServiceNow agents, and NETSCOUT names ServiceNow as a downstream platform partner. Count how many NetOps and observability vendors announce similar integrations this quarter.<\/li>\n<li><strong>The first outcome-based contracts.<\/strong> Brisk AI&rsquo;s founder told Spiceworks he expects vendors to &ldquo;put some of their economics at risk through outcome-based success fees,&rdquo; and NetPilot already offers a money-back milestone. Watch for an established network-automation vendor to put a success fee in its commercial terms.<\/li>\n<li><strong>Extreme&rsquo;s fiscal Q1 results, November 4.<\/strong> Spiceworks reports Extreme pitches Agent ONE Coworker as recommendations with reasoning, bundled into the Platform ONE subscription. The call should show whether bundling the agent is moving Platform ONE adoption toward Extreme&rsquo;s stated 50% target.<\/li>\n<\/ul><\/div>\n<p>            <!-- Topic map --><\/p>\n<div class=\"topic-map\">\n              <img decoding=\"async\" src=\"https:\/\/www.cybersecurityinstitute.com\/blog\/wp-content\/uploads\/2026\/10\/topic-map-agentic-netops-2026-10-11.png\" alt=\"Market map of this week&rsquo;s Agentic NetOps stories: HPE Networking and Rami Rahim around autonomous IT and the multi-vendor gap, with Extreme Networks and Cisco; Riverbed and EMA linking human approval, tool sprawl and the enterprise NOC buyer; LogicMonitor and ServiceNow around agent-to-agent links; NETSCOUT, Futurum Group and Gigamon around network data as the moat, with private equity; Netskope, NetPilot, Vandis and Gluware around credit pricing and agents delivered as a service; Itential, Forward Networks and NetBrain around agent integration and pre-change validation.\" loading=\"eager\" width=\"640\" style=\"width:100%;max-width:640px;height:auto;\"><\/p>\n<p class=\"caption\">Entities and connections across this week&rsquo;s 25 tracked stories. Node size reflects how often an entity appears; line weight reflects how often two appear together.<\/p>\n<p>              <!-- INTERACTIVE_MAP_LINK_START --><\/p>\n<p style=\"margin:10px 0 0;text-align:center;\"><a href=\"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6034\" target=\"_blank\" rel=\"noopener\" style=\"display:inline-block;padding:8px 18px;background-color:#1e1b4b;color:#ffffff !important;text-decoration:none;border-radius:6px;font-size:13px;font-weight:600;\">View interactive topic map &rarr;<\/a><\/p>\n<p><!-- INTERACTIVE_MAP_LINK_END -->\n            <\/div>\n<p>            <!-- Article index --><\/p>\n<h2>Article index<\/h2>\n<h4>Competitive moves: the platform incumbents<\/h4>\n<div class=\"cluster-intro\">The large vendors are pitching autonomy that works best on their own equipment. HPE says most tickets already need no human and showcased its self-driving network at the 2027 Ryder Cup. Cisco says it has unified everything it sells under one management plane and that the Meraki and Catalyst brands will eventually go away. NETSCOUT spent September building a data-first case for AI, and its customer summit made the same argument.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>1. <a href=\"https:\/\/www.theregister.com\/networks\/2026\/10\/11\/hpes-networking-boss-says-ai-will-handle-all-trouble-tickets-without-humans-in-two-years\/5302179\">HPE&amp;#x27;s networking boss says AI will handle all trouble tickets without humans in two years<\/a><\/td>\n<td class=\"src\">The Register<\/td>\n<td class=\"dt\">Oct 11, 2026<\/td>\n<\/tr>\n<tr>\n<td>2. <a href=\"https:\/\/www.hpe.com\/us\/en\/newsroom\/press-release\/2026\/10\/hpe-chosen-to-deliver-intelligent-connectivity-and-autonomous-it-operations-at-the-2027-ryder-cup.html\">HPE chosen to deliver intelligent connectivity and autonomous IT operations at the 2027 Ryder Cup<\/a><\/td>\n<td class=\"src\">HPE Newsroom<\/td>\n<td class=\"dt\">Oct 5, 2026<\/td>\n<\/tr>\n<tr>\n<td>3. <a href=\"https:\/\/siliconangle.com\/2026\/10\/07\/at-webexone-ciscos-jeetu-patel-argues-the-agent-era-will-be-won-on-context-cost-and-control\/\">At WebexOne, Cisco&amp;#x27;s Jeetu Patel argues the agent era will be won on context, cost and control<\/a><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"dt\">Oct 7, 2026<\/td>\n<\/tr>\n<tr>\n<td>4. <a href=\"https:\/\/futurumgroup.com\/insights\/netscout-ngenius-copilot-caps-a-three-release-data-first-strategy\/\">NETSCOUT nGenius Copilot Caps a Three-Release Data-First Strategy<\/a><\/td>\n<td class=\"src\">Futurum Group<\/td>\n<td class=\"dt\">Oct 6, 2026<\/td>\n<\/tr>\n<tr>\n<td>5. <a href=\"https:\/\/intellyx.com\/2026\/10\/09\/network-data-shapes-an-ai-ready-future-at-netscout-engage-2026\/\">Network data shapes an AI-ready future at NETSCOUT ENGAGE 2026<\/a><\/td>\n<td class=\"src\">Intellyx (ITOps Times)<\/td>\n<td class=\"dt\">Oct 9, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>Competitive moves: observability, ITSM and capital<\/h4>\n<div class=\"cluster-intro\">The flank is moving toward the service-management workflow. LogicMonitor made Edwin AI callable by ServiceNow&rsquo;s agents and is holding an event themed on &ldquo;Autonomous IT.&rdquo; Elliott and Siris are exploring a $2 billion-plus sale of Gigamon, the network visibility vendor Elliott took private in 2017. Seismora pitched a control plane that routes AI work by cost, latency and policy. NetBrain published a retail customer story.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>6. <a href=\"https:\/\/www.prnewswire.com\/news-releases\/work4flow-and-logicmonitor-deepen-edwin-ai-investigations-in-servicenow-with-new-agent-to-agent-capabilities-302898638.html\">Work4Flow and LogicMonitor Deepen Edwin AI Investigations in ServiceNow with New Agent-to-Agent Capabilities<\/a><\/td>\n<td class=\"src\">PR Newswire (Work4Flow \/ LogicMonitor)<\/td>\n<td class=\"dt\">Oct 5, 2026<\/td>\n<\/tr>\n<tr>\n<td>7. <a href=\"https:\/\/siliconangle.com\/2026\/10\/10\/autonomous-it-logicmonitor-elevate-2026-logicmonitorelevate\/\">Autonomous IT at LogicMonitor Elevate 2026<\/a><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"dt\">Oct 10, 2026<\/td>\n<\/tr>\n<tr>\n<td>8. <a href=\"https:\/\/kfgo.com\/2026\/10\/07\/elliott-and-siris-explore-2-billion-plus-gigamon-sale-sources-say\/\">Elliott and Siris explore $2 billion-plus Gigamon sale, sources say<\/a><\/td>\n<td class=\"src\">Reuters via KFGO<\/td>\n<td class=\"dt\">Oct 7, 2026<\/td>\n<\/tr>\n<tr>\n<td>9. <a href=\"https:\/\/siliconangle.com\/2026\/10\/09\/control-plane-agentic-ai-seismora-thecube-neo4jdatatoknowledge\/\">Seismora builds a control plane to route AI workloads across devices and clouds<\/a><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"dt\">Oct 9, 2026<\/td>\n<\/tr>\n<tr>\n<td>10. <a href=\"https:\/\/exchange.netbrain.com\/customer-spotlights-87\/customer-story-how-a-leading-retailer-got-its-engineering-hours-back-1727\">Customer Story: How a Leading Retailer Got Its Engineering Hours Back<\/a><\/td>\n<td class=\"src\">NetBrain Exchange<\/td>\n<td class=\"dt\">Oct 7, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>How agents are bought: packaging and delivery<\/h4>\n<div class=\"cluster-intro\">Vendors are changing how agents are sold as well as what they do. Netskope replaced per-agent purchasing with a shared credit pool. Vandis sells Gluware-powered patch automation as a recurring managed service. NetPilot argues for a third route besides build and buy: a vendor builds, tests and delivers the agent against a money-back milestone. Itential argues that most agent integrations expose raw endpoints rather than outcomes, and calls for public benchmarks.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>11. <a href=\"https:\/\/www.globenewswire.com\/news-release\/2026\/10\/06\/3375578\/0\/en\/index.html\">Netskope Unveils AgentSkope Marketplace, Streamlining How Teams Buy, Deploy, and Scale AI Agents<\/a><\/td>\n<td class=\"src\">GlobeNewswire (Netskope)<\/td>\n<td class=\"dt\">Oct 6, 2026<\/td>\n<\/tr>\n<tr>\n<td>12. <a href=\"https:\/\/www.prnewswire.com\/news-releases\/vandis-launches-intelligent-patch-automation-service-302899813.html\">Vandis Launches Intelligent Patch Automation Service<\/a><\/td>\n<td class=\"src\">PR Newswire (Vandis)<\/td>\n<td class=\"dt\">Oct 6, 2026<\/td>\n<\/tr>\n<tr>\n<td>13. <a href=\"https:\/\/www.netpilot.io\/blog\/network-ai-agents-build-buy-or-delivered\">Network AI Agents in 2026: Build, Buy, or Have It Delivered<\/a> <em>(foundational, vendor-authored)<\/em><\/td>\n<td class=\"src\">NetPilot<\/td>\n<td class=\"dt\">Oct 1, 2026<\/td>\n<\/tr>\n<tr>\n<td>14. <a href=\"https:\/\/www.itential.com\/resource\/blog\/mcp-server-best-practices-for-agents\/\">We Gave Agents a New Protocol &amp; Handed Them the Same Old Plumbing<\/a> <em>(foundational, Itential-authored)<\/em><\/td>\n<td class=\"src\">Itential<\/td>\n<td class=\"dt\">Oct 9, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>Buyer adoption and demand signal<\/h4>\n<div class=\"cluster-intro\">Buyers want autonomy but are not ready to grant it. Riverbed&rsquo;s 1,200-respondent survey pairs 90% ambition with 77% insisting on human approval. EMA finds most enterprises still consolidating six to eight observability tools. A Broadband Forum survey of fixed-broadband providers names bad data (83%) and poor vendor interoperability (78%) as the main barriers. A Fierce Network podcast episode argues that agentic AI makes the network part of application performance.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>15. <a href=\"https:\/\/www.riverbed.com\/press-releases\/global-survey-finds-agentic-ai-reshaping-it\/\">New Riverbed Global Survey Finds Agentic AI is Reshaping IT: 90% Plan to Pursue Autonomous IT; Yet 77% Require Human Approval<\/a><\/td>\n<td class=\"src\">Riverbed<\/td>\n<td class=\"dt\">Oct 6, 2026<\/td>\n<\/tr>\n<tr>\n<td>16. <a href=\"https:\/\/www.networkworld.com\/article\/4231352\/tool-sprawl-ai-complicate-enterprise-network-operations.html\">Tool sprawl, AI complicate enterprise network operations<\/a><\/td>\n<td class=\"src\">Network World<\/td>\n<td class=\"dt\">Oct 8, 2026<\/td>\n<\/tr>\n<tr>\n<td>17. <a href=\"https:\/\/www.businesswire.com\/news\/home\/20261008199901\/en\/Broadband-Service-Providers-Identify-Major-Hurdles-in-the-Transition-to\">Broadband Service Providers Identify Major Hurdles in the Transition to Autonomous Networks<\/a><\/td>\n<td class=\"src\">Business Wire (Broadband Forum)<\/td>\n<td class=\"dt\">Oct 8, 2026<\/td>\n<\/tr>\n<tr>\n<td>18. <a href=\"https:\/\/www.fierce-network.com\/broadband\/five-nine-are-enterprise-networks-ready-ai\">The Five Nine: Are enterprise networks ready for AI?<\/a> <em>(podcast episode)<\/em><\/td>\n<td class=\"src\">Fierce Network<\/td>\n<td class=\"dt\">Oct 9, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>The NOC operating model<\/h4>\n<div class=\"cluster-intro\">The practitioners and vendor authors agree on a staged path. Agents start in a support role with their own credentials, earn approval for repeatable fixes, and gain wider scope only once they have proven reliable. Riverbed, BackBox and Forward Networks each describe a version of that path from their own product angle. TM Forum and The Fast Mode carry the same argument from the carrier side.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>19. <a href=\"https:\/\/www.spiceworks.com\/it-careers\/ai-coworkers-for-networking-what-they-can-do-and-where-they-fall-short\/\">AI coworkers for networking: What they can do and where they fall short<\/a><\/td>\n<td class=\"src\">Spiceworks<\/td>\n<td class=\"dt\">Oct 9, 2026<\/td>\n<\/tr>\n<tr>\n<td>20. <a href=\"https:\/\/www.networkworld.com\/article\/4230119\/from-automated-response-to-reasoning-building-confidence-in-ai-driven-netops.html\">From automated response to reasoning: Building confidence in AI-driven NetOps<\/a> <em>(foundational, vendor-authored)<\/em><\/td>\n<td class=\"src\">Network World<\/td>\n<td class=\"dt\">Oct 5, 2026<\/td>\n<\/tr>\n<tr>\n<td>21. <a href=\"https:\/\/www.riverbed.com\/blogs\/path-to-autonomous-network-operations\/\">The Path to Autonomous Network Operations<\/a> <em>(foundational, Riverbed-authored)<\/em><\/td>\n<td class=\"src\">Riverbed<\/td>\n<td class=\"dt\">Oct 6, 2026<\/td>\n<\/tr>\n<tr>\n<td>22. <a href=\"https:\/\/www.forbes.com\/councils\/forbestechcouncil\/2026\/10\/07\/every-network-change-opens-a-security-gap\/\">Every Network Change Opens A Security Gap<\/a> <em>(foundational, vendor-authored)<\/em><\/td>\n<td class=\"src\">Forbes<\/td>\n<td class=\"dt\">Oct 7, 2026<\/td>\n<\/tr>\n<tr>\n<td>23. <a href=\"https:\/\/www.thenetworkdna.com\/2026\/10\/agentic-netops-how-ai-powered-network.html\">Agentic NetOps: How AI-Powered Network Operations Are Replacing the Ticket Queue<\/a> <em>(foundational)<\/em><\/td>\n<td class=\"src\">The Network DNA<\/td>\n<td class=\"dt\">Oct 1, 2026<\/td>\n<\/tr>\n<tr>\n<td>24. <a href=\"https:\/\/inform.tmforum.org\/features-and-opinion\/building-autonomy-through-the-digital-continuum\">Building autonomy through the digital continuum<\/a> <em>(foundational)<\/em><\/td>\n<td class=\"src\">TM Forum Inform<\/td>\n<td class=\"dt\">Oct 5, 2026<\/td>\n<\/tr>\n<tr>\n<td>25. <a href=\"https:\/\/www.thefastmode.com\/expert-opinion\/50936-from-ran-optimization-to-5g-core-why-agentic-ai-must-think-across-the-network\">From RAN Optimization to 5G Core: Why Agentic AI Must Think Across the Network<\/a> <em>(foundational)<\/em><\/td>\n<td class=\"src\">The Fast Mode<\/td>\n<td class=\"dt\">Oct 8, 2026<\/td>\n<\/tr>\n<\/table>\n<p>            <!-- Detailed write-ups --><\/p>\n<h2>Detailed write-ups<\/h2>\n<div class=\"article\">\n<h4>1. HPE says agents will soon close every ticket, but its autonomy works best on its own equipment<\/h4>\n<p class=\"meta\">The Register &middot; HPE Newsroom &middot; Spiceworks &middot; October 5&ndash;11, 2026<\/p>\n<p><strong>HPE<\/strong> made the boldest autonomy claim of any incumbent this year. Rami Rahim, the former Juniper CEO who now runs HPE Networking, told The Register that &ldquo;we&rsquo;re now at probably around 70 to 80 percent of all tickets don&rsquo;t require human intervention,&rdquo; and that &ldquo;within two to three years, we&rsquo;ll have no issues that require humans,&rdquo; with hardware swaps the only exception. He measures success by the volume and fix time of the most common enterprise ticket, which he summarised as &ldquo;the Wi-Fi sucks.&rdquo; HPE is extending its self-driving network approach across its hybrid cloud portfolio. On October 5 it announced it will run the network for the 2027 Ryder Cup in Ireland, covering a 230-acre site and more than 250,000 fans.<\/p>\n<p>HPE&rsquo;s own product team described something more limited. Mittal Parekh, a senior director at HPE, told Spiceworks that Marvis supports both &ldquo;driver-assisted&rdquo; and &ldquo;trusted autonomous actions,&rdquo; but that autonomy is opt-in, &ldquo;governed by customer-defined permissions,&rdquo; and audited. Rahim said the same thing in his own words: operators turn on automated actions &ldquo;feature by feature, and capability by capability,&rdquo; starting with tasks as small as rebooting a switch port. Parekh also said Marvis&rsquo;s visibility &ldquo;is strongest across HPE Networking environments&rdquo; and that on third-party equipment it &ldquo;often operates in a driver-assist mode,&rdquo; recommending fixes rather than making them.<\/p>\n<p>HPE is making two arguments at once. Publicly, the message is that human-run network operations will soon be obsolete. In practice, it is selling incremental, permissioned autonomy that is strongest on its own equipment. That combination favours HPE in single-vendor estates and leaves an opening in the mixed-vendor networks most large enterprises run. Rahim&rsquo;s 70&ndash;80% figure is his own and has not been published as a metric. The supporting evidence is still a single reference: the UK Ministry of Justice&rsquo;s roughly 75% cut in service-desk tickets, which HPE cited in May.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.theregister.com\/networks\/2026\/10\/11\/hpes-networking-boss-says-ai-will-handle-all-trouble-tickets-without-humans-in-two-years\/5302179\">The Register (HPE&amp;#x27;s networking boss says AI will handle all trouble tickets without humans in two years)<\/a> &middot; <a href=\"https:\/\/www.hpe.com\/us\/en\/newsroom\/press-release\/2026\/10\/hpe-chosen-to-deliver-intelligent-connectivity-and-autonomous-it-operations-at-the-2027-ryder-cup.html\">HPE Newsroom (HPE chosen to deliver intelligent connectivity and autonomous IT operations at the 2027 Ryder Cup)<\/a> &middot; <a href=\"https:\/\/www.spiceworks.com\/it-careers\/ai-coworkers-for-networking-what-they-can-do-and-where-they-fall-short\/\">Spiceworks (AI coworkers for networking: What they can do and where they fall short)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>2. Gigamon goes up for sale, putting a price on network visibility<\/h4>\n<p class=\"meta\">Reuters via KFGO &middot; October 7, 2026<\/p>\n<p><strong>Elliott Investment Management<\/strong> and <strong>Siris<\/strong> are exploring a sale of Gigamon that could value the company at more than $2 billion, Reuters reported, citing people familiar with the matter. Bank of America and Perella Weinberg Partners are advising, and the process is in its early stages. Possible buyers include private-equity firms and strategic acquirers looking to expand in network monitoring, cybersecurity and cloud infrastructure management. All parties declined to comment.<\/p>\n<p>Gigamon, founded in 2004, sells software that monitors network traffic and detects threats. It says it has more than 4,000 customers, including banks, healthcare providers and government agencies. According to the sources, annual recurring revenue exceeds $400 million and EBITDA is about $170 million. Elliott took the company private in 2017 for about $1.6 billion, and Siris bought a minority stake in 2024.<\/p>\n<p>Gigamon is not a network-automation vendor, but its sale will put a price on the data layer that NetOps agents depend on. A $2 billion-plus price on roughly $400 million of ARR implies about five times ARR for a profitable visibility business. The identity of the buyer matters as much as the price. An observability or security platform buying Gigamon would continue this week&rsquo;s pattern of network data being absorbed into larger platforms (see NETSCOUT and LogicMonitor below). A private-equity buyer would set a valuation marker for independent network-operations software.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/kfgo.com\/2026\/10\/07\/elliott-and-siris-explore-2-billion-plus-gigamon-sale-sources-say\/\">Reuters via KFGO (Elliott and Siris explore $2 billion-plus Gigamon sale, sources say)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>3. Riverbed: 90% want autonomous IT, 77% won&rsquo;t let AI decide without sign-off<\/h4>\n<p class=\"meta\">Riverbed &middot; October 6, 2026<\/p>\n<p><strong>Riverbed<\/strong>&rsquo;s global survey, fielded by Coleman Parkes in July, polled 1,200 business and IT decision-makers across seven countries and six industries, at organisations averaging $2.3 billion in revenue. Ambition is close to universal: 90% want agentic AI to drive autonomous IT operations, 90% expect human-supervised or highly autonomous operations within two years, and 63% have increased AI spending. The current reality is much further behind. Only 19% of IT operations are automated today, 41% say their environments are fully ready for AI, and 8% have AI-enabled operations across the enterprise.<\/p>\n<p>Trust is the constraint. 77% are hesitant to let AI make operational decisions without human approval, 69% prefer human-supervised AI, and only 24% trust AI recommendations extensively with limited review. The top obstacles are security and compliance (55%), the risk of disrupting operations (45%) and lack of trust in AI decisions (39%). Data is a problem too. 96% call visibility across domains critical but only 17% have it unified, and 21% rate their data quality as excellent. &ldquo;The next phase of AI is not simply more automation, but AI that enterprises can understand, trust and govern,&rdquo; said Riverbed CMO Jim Gargan. A companion Riverbed blog sets out a four-step path from AI-assisted operations, through approved execution and autonomy for trusted scenarios, to predictive operations.<\/p>\n<p>This is a vendor-commissioned survey covering IT operations broadly, so it is directional. But its central finding, that buyers want autonomy and still require approval, matches every other data point this week, including HPE&rsquo;s opt-in model. The near-term opportunity is to sell the approval workflow and the trust-building steps, not full autonomy. The 79-point gap between buyers who say visibility matters and those who have it unified is the most direct demand signal for network data and context products.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.riverbed.com\/press-releases\/global-survey-finds-agentic-ai-reshaping-it\/\">Riverbed (New Riverbed Global Survey Finds Agentic AI is Reshaping IT: 90% Plan to Pursue Autonomous IT; Yet 77% Require Human Approval)<\/a> &middot; <a href=\"https:\/\/www.riverbed.com\/blogs\/path-to-autonomous-network-operations\/\">Riverbed (The Path to Autonomous Network Operations)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>4. EMA: no one gets a single pane of glass, and governance predicts AI maturity<\/h4>\n<p class=\"meta\">Network World &middot; October 8, 2026<\/p>\n<p><strong>EMA<\/strong>&rsquo;s survey of 356 enterprise IT professionals, reported by Network World, found organisations typically running six to eight observability tools. Only 17% have finished consolidating them, 51% are partway through and 32% are still planning. Respondents named the costs: skills and staffing (45%), integration and API work (44%), context switching that slows investigations (41%), more manual effort (40%) and alert noise (34%). 32% use AI extensively in observability, and 51% use it in selected areas.<\/p>\n<p>The finding that matters commercially is about governance. 24% of organisations have fully centralised tool governance and 48% mostly centralised, and those with centralised governance reported more confidence in consolidation and more mature AI use. &ldquo;No one gets a single pane of glass,&rdquo; said EMA&rsquo;s Shamus McGillicuddy, adding that AI can overcome data spread across many tools but not bad data or bad operations. His colleague Christopher Steffen warned that probabilistic agents may not respect deterministic controls. His example was an AI that deleted a firewall rule because it looked like a mistake, when in fact it allowed one database connection once a quarter.<\/p>\n<p>For vendors, the best prospects are buyers with centralised governance: they are the ones already using AI at scale. Steffen&rsquo;s firewall example is also the kind of story that makes buyers ask for policy checks and rollback before they allow autonomous change. Vendors that can show those controls in a demo will have an easier time getting past the risk discussion.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.networkworld.com\/article\/4231352\/tool-sprawl-ai-complicate-enterprise-network-operations.html\">Network World (Tool sprawl, AI complicate enterprise network operations)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>5. The people deploying network agents say the operating model, not the model, is the risk<\/h4>\n<p class=\"meta\">Spiceworks &middot; October 9, 2026<\/p>\n<p>Spiceworks compared four vendors&rsquo; versions of &ldquo;agentic&rdquo; networking. <strong>Extreme<\/strong> claims its Agent ONE Coworker resolves issues up to 15 times faster, bundles it into the Platform ONE subscription, and pitches it as recommendations with reasoning rather than autonomous action. <strong>Zayo<\/strong> launched what it calls the first production MCP server for networking, through which approved agents can take authorised actions. <strong>Riverbed<\/strong> added AI to existing monitoring tools, with a person approving actions such as rerouting traffic, at no extra charge at launch. <strong>HPE<\/strong>&rsquo;s Marvis runs in driver-assist mode by default and acts on its own only where the customer allows it. The article&rsquo;s summary: these agents are useful but &ldquo;not ready to run your network on their own &ndash; and the people building them largely agree.&rdquo;<\/p>\n<p>The practitioners went further. Lukasz Lazewski, CEO of LLInformatics, said agents should be treated like a new hire. They start in a support role &ldquo;with no autonomy whatsoever,&rdquo; get their own credentials so access can be revoked, and run alongside a recovery setup in case something goes wrong. Subodh Kumar, founder and CEO of Brisk AI, said: &ldquo;The biggest failure point between an agentic AI demo and production isn&rsquo;t necessarily the model, it&rsquo;s the operating model around it.&rdquo; He told buyers to ask what deployment and change-management support comes with the product, and said he expects vendors to &ldquo;put some of their economics at risk through outcome-based success fees.&rdquo;<\/p>\n<p>Two points matter commercially. First, the major vendors are now offering agent capabilities as part of an existing subscription or at no extra charge, which makes it harder to charge separately for an agent. Second, buyers are starting to evaluate implementation support and risk-sharing alongside features. Vendors that can offer a staged rollout, separate agent credentials, rollback and some pricing tied to outcomes will match what these buyers are asking for.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.spiceworks.com\/it-careers\/ai-coworkers-for-networking-what-they-can-do-and-where-they-fall-short\/\">Spiceworks (AI coworkers for networking: What they can do and where they fall short)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>6. LogicMonitor connects its AI to ServiceNow&rsquo;s agents<\/h4>\n<p class=\"meta\">PR Newswire &middot; SiliconANGLE &middot; October 5&ndash;10, 2026<\/p>\n<p><strong>LogicMonitor<\/strong> and ServiceNow implementation partner <strong>Work4Flow<\/strong> are building agent-to-agent links so that <strong>ServiceNow<\/strong>&rsquo;s AI agents can call six Edwin AI capabilities during an incident: alert metrics, insight metrics, root-cause analysis, alert summary, insight summary and diagnosis guidance. Rather than receiving a fixed data feed, the ServiceNow agent requests correlated context early in an incident and root-cause analysis as the investigation develops. Managed service provider Bell Techlogix is the named customer and plans to automate more Tier 1 work this way. The release gives no figures, pricing or date for general availability. &ldquo;The real value of AI agents comes from giving them access to the right intelligence at the right moment,&rdquo; said LogicMonitor chief AI officer Karthik SJ.<\/p>\n<p>LogicMonitor&rsquo;s Elevate conference, October 13&ndash;14 in Chicago, is themed &ldquo;Autonomous IT.&rdquo; Its Autonomous IT Innovation Program, covering guided investigation, user-approved response, remediation and governance, has been in private preview since May. The company bought Catchpoint in December 2025 and has connected Edwin AI to IBM watsonx and Red Hat Ansible. Chief product officer Garth Fort: &ldquo;The future of IT operations is not dashboard-centric. It is AI-centric.&rdquo;<\/p>\n<p>This changes where the network vendor&rsquo;s intelligence gets used. If the ServiceNow agent coordinates the incident and calls specialists as it needs them, the monitoring vendor&rsquo;s console matters less, and what matters is whether its capabilities can be called by that agent. Network operations vendors that cannot be called this way risk being left out of incidents managed in ServiceNow. Those that can be called become part of a workflow the customer already pays for.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.prnewswire.com\/news-releases\/work4flow-and-logicmonitor-deepen-edwin-ai-investigations-in-servicenow-with-new-agent-to-agent-capabilities-302898638.html\">PR Newswire (Work4Flow \/ LogicMonitor) (Work4Flow and LogicMonitor Deepen Edwin AI Investigations in ServiceNow with New Agent-to-Agent Capabilities)<\/a> &middot; <a href=\"https:\/\/siliconangle.com\/2026\/10\/10\/autonomous-it-logicmonitor-elevate-2026-logicmonitorelevate\/\">SiliconANGLE (Autonomous IT at LogicMonitor Elevate 2026)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>7. Futurum: NETSCOUT&rsquo;s copilot is table stakes, and its data is the asset<\/h4>\n<p class=\"meta\">Futurum Group &middot; Intellyx &middot; October 6&ndash;9, 2026<\/p>\n<p>Futurum&rsquo;s Mitch Ashley reviewed <strong>NETSCOUT<\/strong>&rsquo;s three September releases as a single strategy. The company first expanded its data platform, then opened its analytics to outside AI agents through MCP, and finally launched nGenius Copilot, a conversational interface, on September 29. His verdict: &ldquo;a copilot for an observability platform is a parity feature in late 2026.&rdquo; What lasts is the trusted operational data beneath it, derived from actual network traffic rather than sampled telemetry. NETSCOUT says its internal testing found that feeding AI its contextualised evidence cut token consumption by more than 25% compared with standard logs and metrics. &ldquo;Reliable AI starts with reliable data,&rdquo; said Phil Gray, NETSCOUT&rsquo;s AVP of product management.<\/p>\n<p>At NETSCOUT&rsquo;s ENGAGE customer summit in Dallas (October 6&ndash;8), CEO Anil Singhal presented a &ldquo;NETSCOUT 5.0&rdquo; vision that names ServiceNow and Splunk as downstream platform partners. Futurum listed the open questions. Will the copilot move from recommending to carrying out guided remediation? Will rivals with less complete telemetry match the conversational experience before buyers look closely at data quality? And will NETSCOUT publish accuracy and grounding evidence, which it has not yet done?<\/p>\n<p>A respected analyst is now saying that conversational AI on a network tool no longer differentiates on its own. Competition is moving to data quality, measured accuracy and the cost of running AI on the data. A vendor that can show its data makes agents more accurate and cheaper to run has a stronger story than one that adds another chat interface.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/futurumgroup.com\/insights\/netscout-ngenius-copilot-caps-a-three-release-data-first-strategy\/\">Futurum Group (NETSCOUT nGenius Copilot Caps a Three-Release Data-First Strategy)<\/a> &middot; <a href=\"https:\/\/intellyx.com\/2026\/10\/09\/network-data-shapes-an-ai-ready-future-at-netscout-engage-2026\/\">Intellyx (ITOps Times) (Network data shapes an AI-ready future at NETSCOUT ENGAGE 2026)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>8. Netskope sells agents from a credit pool, and others sell them as a service<\/h4>\n<p class=\"meta\">GlobeNewswire &middot; PR Newswire &middot; NetPilot &middot; October 1&ndash;6, 2026<\/p>\n<p><strong>Netskope<\/strong> launched its AgentSkope Marketplace, where customers browse, size and deploy its SOC and NOC agents from one catalogue and pay from one pool of committed credits instead of buying each agent separately. It includes a credit calculator and a usage dashboard and is available to all Netskope customers now. No prices were disclosed. &ldquo;Until now, teams have typically bought agents one product at a time,&rdquo; said chief product officer John Martin. A survey Netskope commissioned found 42% of security and network operations leaders had alerts or tickets go uninvestigated.<\/p>\n<p>Two other launches this week sold the outcome rather than the software. <strong>Vandis<\/strong>, a long-established reseller and MSP, launched a recurring managed patch-automation service built on <strong>Gluware<\/strong>&rsquo;s platform. &ldquo;Customers increasingly want trusted partners that can turn advanced automation technology into an operational service,&rdquo; said Gluware CRO John Donelan. <strong>NetPilot<\/strong> argued in a long buyer&rsquo;s guide that network teams have a third choice besides building or buying: a vendor builds, tests and delivers the agent against a money-back milestone. It cites Gartner, via NTT DATA, projecting that half of organisations will run agentic NetOps with minimal human involvement by 2030.<\/p>\n<p>All three are vendor-written, but they show how agents are starting to be sold. Credit pools make it easy to try new agents and shift risk toward a consumption commitment. Managed and delivered models suit buyers who lack the staff to run agents themselves, which is the skills shortage EMA measured this week. Vendors still selling per-device licences will need an answer when a buyer asks for agents on consumption or outcome terms.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.globenewswire.com\/news-release\/2026\/10\/06\/3375578\/0\/en\/index.html\">GlobeNewswire (Netskope) (Netskope Unveils AgentSkope Marketplace, Streamlining How Teams Buy, Deploy, and Scale AI Agents)<\/a> &middot; <a href=\"https:\/\/www.prnewswire.com\/news-releases\/vandis-launches-intelligent-patch-automation-service-302899813.html\">PR Newswire (Vandis) (Vandis Launches Intelligent Patch Automation Service)<\/a> &middot; <a href=\"https:\/\/www.netpilot.io\/blog\/network-ai-agents-build-buy-or-delivered\">NetPilot (Network AI Agents in 2026: Build, Buy, or Have It Delivered)<\/a><\/p>\n<\/p><\/div>\n<p>            <!-- Calls to action --><\/p>\n<div class=\"watchlist\">\n<h2>Calls to action<\/h2>\n<ul>\n<li><strong>Make multi-vendor autonomy the contrast with HPE.<\/strong> HPE&rsquo;s own product team says Marvis often drops to driver-assist on other vendors&rsquo; equipment. In accounts with mixed estates, show what your agents can verify and act on across vendors, and put a named customer result next to it.<\/li>\n<li><strong>Lead with the approval workflow, not autonomy.<\/strong> 77% of Riverbed&rsquo;s respondents require human sign-off. Show buyers an approval tier, a pre-authorised tier for repeatable fixes, separate agent credentials and an audit trail, and give them a plan for moving between tiers.<\/li>\n<li><strong>Make sure ServiceNow&rsquo;s agents can call your capabilities.<\/strong> LogicMonitor now exposes six Edwin AI functions agent-to-agent inside ServiceNow. Check that your diagnosis and change-validation functions can be called the same way, and brief your ServiceNow partners before Elevate sets the comparison.<\/li>\n<li><strong>Prepare a consumption and an outcome-based offer.<\/strong> Netskope sells from a credit pool, and buyers interviewed by Spiceworks are asking for success fees. Have a consumption option and an outcome-linked option ready for the next large renewal, so pricing doesn&rsquo;t become the reason to switch.<\/li>\n<li><strong>Publish accuracy and cost evidence for your AI.<\/strong> Futurum calls copilots a parity feature and is asking vendors to show accuracy and grounding. Measure and publish your agents&rsquo; accuracy and the token cost per resolved incident before a competitor sets the benchmark.<\/li>\n<li><strong>Target buyers with centralised tool governance.<\/strong> EMA links centralised governance to more mature AI use. Prioritise those accounts this quarter, and use EMA&rsquo;s firewall-rule example to explain why policy checks and rollback come before autonomous change.<\/li>\n<\/ul><\/div>\n<\/td>\n<\/tr>\n<p>        <!-- Footer --><\/p>\n<tr>\n<td class=\"footer\">\n<p class=\"brand\">Agentic NetOps<\/p>\n<p>A weekly intelligence bulletin from Security Radar LLC.<br \/>\n            Curated by Paul Davis &middot; <a href=\"mailto:paul.davis@security-radar.com\">paul.davis@security-radar.com<\/a><\/p>\n<p>&copy; 2026 Security Radar LLC. All rights reserved.<\/p>\n<p>Article titles and summaries are excerpted for review and commentary; all linked articles remain the copyright of their respective publishers and authors.<\/p>\n<p>*|LIST:ADDRESS|*<\/p>\n<p><a href=\"*|ARCHIVE|*\">View this email in your browser<\/a> &middot; <a href=\"*|UNSUB|*\">Unsubscribe<\/a><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>October 11, 2026 &middot; Weekly Edition Agentic NetOps HPE&rsquo;s networking chief says AI will soon close every network ticket without a human, but buyers in two new surveys still want to approve the changes. Elliott and Siris are exploring a $2 billion-plus sale of Gigamon. LogicMonitor connected its AI to&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45,11],"tags":[],"class_list":["post-6035","post","type-post","status-publish","format-standard","hentry","category-ai-ml","category-trends"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6035"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6035\/revisions"}],"predecessor-version":[{"id":6072,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6035\/revisions\/6072"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}