SenseOn AI Architecture
SenseOn's AI is built around Horus, an AI orchestrator and chat interface that coordinates a set of specialist agents on top of the platform's built-in detection. You interact with Horus through chat; behind the scenes it routes your request to the right agent, gathers the data it needs, and surfaces the results as cases and insights you can act on.
This page explains how the pieces fit together.
The architecture, in four layers
SenseOn's AI sits on a layered architecture. Data flows up: telemetry is ingested and unified, the platform detects and correlates it into cases, and Horus orchestrates specialist agents that work with that data on your behalf.
1. Data Fabric: the data layer
The Data Fabric ingests and unifies all telemetry across endpoint, network, cloud, identity, and third-party tools into a single, queryable foundation. Every layer above it works from this unified view of your environment.
2. Detection & correlation: built-in
Built into the platform, this layer continuously correlates telemetry and creates cases automatically. It is core platform behaviour rather than a named or marketed capability, and it can be extended with custom agents.
3. Horus: AI orchestration & chat
Horus is SenseOn's AI orchestrator and chat interface. It coordinates the specialist agents, sitting on top of SenseOn's built-in detection. Horus acts between analysts and the agents that do the work: you ask a question or set a goal in chat, Horus routes it to the right agent, and the results surface as cases analysts act on.
4. Specialist agents
Each specialist agent is purpose-built for a part of the security workflow and is coordinated by Horus. Some are surfaced as dedicated modules in the platform; all are reachable through Horus chat.
| Agent | What it does | Where you find it |
|---|---|---|
| Resolve | Investigates and closes cases autonomously, delivering evidence-backed verdicts. | Investigate and Experience (Resolve) |
| Hunter | Hunts telemetry and builds queries; writes, debugs, and explains CHSQL. | Hunt Lab, Horus chat (Hunt Lab) |
For details on how AI Case Summaries (narrative summaries generated for each case) are produced, and on the data handling and privacy behind SenseOn's generative AI, see AI Case Summaries.
How it fits together
- You work through Horus. Horus is the single chat interface across SenseOn's AI. Ask it to investigate a case or hunt across telemetry, and it coordinates the right specialist agent.
- Agents work from the same data. Every agent draws on the unified Data Fabric and the platform's built-in detection and correlation, so their findings are consistent and grounded in the same telemetry.
- Results surface as cases. The platform turns correlated activity into cases automatically. Horus and its agents enrich, investigate, and explain those cases. Your analysts keep the final say.