Source: https://internal-agents.com/problems/security-alerts

# Triage security alerts

These records have the Security work-domain tag. Compare what starts an investigation, which tools and data the agent can use, and who acts on the result.

## Agents

### [Slack's Security investigation service](https://internal-agents.com/agents/slack-context-system)

Slack's engineering team runs an agentic service that investigates security alerts. A Director agent orchestrates rounds, Expert agents gather evidence, and a Critic scores each finding for…

Agent · Security · Detailed

### [WorkOS's Project Horizon](https://internal-agents.com/agents/workos-project-horizon)

Horizon takes requests and external events into remote coding sessions, connects them to company context through MCP, and returns changes for human review. Its orchestrator manages sandbox lifecycle…

Agent · Coding · Code review · Security · Detailed

### [Figma's Security alert triage and investigation agents](https://internal-agents.com/agents/figma-security-agent)

Figma's security engineering team assembled an alert-response system from commercial parts rather than writing an agent framework: agent loops run inside Tines workflow automation on Claude models…

Agent family · Security · On-call · Coding

### [Harvey's Security operations agents](https://internal-agents.com/agents/harvey-security-operations)

Harvey’s SOC combines independently scheduled reporting, alert-triage and threat-watch agents for its security team.

Agent family · Security

### [Notion's Scruff](https://internal-agents.com/agents/notion-scruff)

Scruff investigates security alerts for Notion’s Detection and Response team, preparing analysis for human decisions.

Agent · Security

## Infrastructure

### [Harvey's Spectre](https://internal-agents.com/agents/harvey-spectre)

Harvey's internal collaborative cloud agent platform; turns requests from Slack, the web app, or automations into durable runs that return reviewable summaries, diffs, branches, and PRs.

Platform · Coding · Code review · On-call · Security · Detailed

### [Notion's Custom Agents](https://internal-agents.com/agents/notion-custom-agents)

Custom Agents is Notion's platform for building agents in a Notion workspace, and Notion ships it internally first. Staff in IT ticketing, supply chain procurement, and recruiting build their own…

Platform · Support · Finance ops · Recruitment · Security