# Swimlane adds custom AI threat detections and MCP support to Turbine

Digest AI · Enterprise & Industry · published 2026-10-28T13:00:00Z

Canonical: https://digestai.news/story/swimlane-adds-custom-ai-threat-detections-and-mcp-support-to-turbine

## Summary

Swimlane released new features in its Turbine platform on October 28, allowing security teams to create their own AI-driven threat detection rules. The update enables organizations to define custom logic for operational data, generating alerts that feed directly into Swimlane AI SOC for investigation. This addresses gaps where traditional security tools struggle to detect anomalies tied to AI agents, local models, or Model Context Protocol (MCP) servers—such as unauthorized AI service use, disabled guardrails, or resource overuse by agents. The platform claims to process tens of thousands of records in parallel, routing alerts for further action without manual intervention between detection and response.

Swimlane also introduced two-way MCP support, letting its Hero AI agent connect to external MCP servers (like those for Claude, ChatGPT, or Microsoft Copilot) for tool integration and vice versa. Additionally, the Hero AI Application Builder Agent automates the creation of security workflows based on natural language descriptions, though changes require human review before saving. These updates position Turbine as a bridge between AI-driven automation and traditional security infrastructure, aiming to reduce reliance on universal detection signatures and better handle AI-specific risks.

## Key points

- Swimlane’s Turbine now lets security teams define custom AI threat detection rules for operational data
- Two-way MCP support connects Turbine’s Hero AI agent with external AI tools like Claude or Copilot
- Hero AI Application Builder Agent drafts security workflows from natural language input, pending review

## Why it matters

Custom AI threat detection fills a critical gap for enterprises deploying AI agents, where traditional security tools often miss AI-specific risks like prompt injection or unauthorized model use. Two-way MCP support and automated workflow building reduce manual setup while maintaining governance, helping teams scale AI security without overhauling existing infrastructure.

## Sources

1. [Swimlane Adds Custom AI Threat Detections and Two-Way MCP Support to Turbine](https://unite.ai/swimlane-custom-ai-threat-detections-two-way-mcp-turbine) (Unite.AI, 2026-10-28)

## Cite

Digest AI, "Swimlane adds custom AI threat detections and MCP support to Turbine", 28 October 2026, https://digestai.news/story/swimlane-adds-custom-ai-threat-detections-and-mcp-support-to-turbine

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/swimlane-adds-custom-ai-threat-detections-and-mcp-support-to-turbine.json