Gigamon unveils AI-powered Insights to boost cloud security & IT

Gigamon has introduced Gigamon Insights, an agentic AI application designed to deliver guidance for Security, IT, and Network Operations teams through network-derived telemetry.

This new application is integrated with major platforms including AWS, Elastic, and Splunk, aiming to assist security and IT analysts in detecting threats, troubleshooting performance issues, and addressing compliance gaps. Gigamon Insights enables users to ask questions, query trusted metadata, and receive context-rich insights and recommended actions directly within the platforms they already operate.

According to Gigamon, Insights is embedded into the Gigamon Deep Observability Pipeline, enhancing investigation processes and root-cause analysis while upholding data privacy. The application's flexible AI architecture supports private or bring-your-own large language models (LLMs), allowing organisations to maintain control over their data. Security and IT teams can utilise pre-defined prompts or create free-form queries for analysis and actionable insights. Gigamon's Application Metadata Intelligence (AMI) serves as the core technology, enriching network-derived telemetry with application-level context to ensure insights are reliable and actionable.

Market context

Cybersecurity teams face heightened challenges as adversaries adopt AI-driven tactics, increasing the frequency and complexity of attacks. Referencing findings from the 2025 Hybrid Cloud Security Survey, Gigamon highlighted that over half of surveyed security and IT leaders (53 percent) reported increased attacks targeting their organisation's LLM deployments, alongside a rise in AI-driven ransomware incidents.

"AI continues to raise the stakes for Security and IT teams, requiring new approaches to secure, optimize, and manage networks and applications," said Sarah Banks, Vice President, Product Management at Gigamon. "Network-derived telemetry is the best way to truly know what is happening across hybrid cloud infrastructure. Gigamon Insights uses agentic AI to fuse this source of truth with AI at scale, delivering comprehensive business and technical answers directly into the security, observability and cloud tools our customers already trust."

Technical scope

Gigamon Insights extends the company's Deep Observability Pipeline, delivering network telemetry - such as packets, flows, and application-aware metadata - to security and observability platforms, as well as cloud environments. The integration is intended to bridge visibility gaps in SIEM and cloud tools, offering immediate context-rich intelligence to enable faster and more precise analyst responses. Through the agentic interface, analysts can run prompts or perform free-form investigations to accelerate incident response and root cause analysis. According to the company, this can help equip junior analysts to operate with the competence of seasoned professionals, potentially reducing training costs and strengthening threat visibility.

Highlighted capabilities of Gigamon Insights include accelerating investigations, reducing mean time to resolution, detecting advanced threats such as lateral movement and command-and-control activities, identifying compliance gaps like expired certificates or weak encryption, validating microsegmentation policies, maintaining continuous visibility across hybrid cloud infrastructure, and guiding real-time troubleshooting activities.

Industry perspectives

"As enterprises move toward AI-driven architectures, one constant remains: the foundational value of network-derived telemetry," said Alan Weckel, Co-Founder and Analyst, 650 Group. "By pairing network-derived telemetry with generative and agentic AI, enterprises can accelerate time to insight and strengthen outcomes across cybersecurity, application performance, and network operations. That's why deep observability is indispensable in the AI era, and we strongly support the vision Gigamon is bringing to market."

Santosh Krishnan, General Manager, Observability and Security at Elastic, explained the impact on their joint customers:

"As the leader in search AI, our mission is to turn data into answers. Our partnership with Gigamon builds on that mission, adding a new layer of intelligence to our security platform. By integrating AI-driven network telemetry into Elastic Security, our customers gain deep observability and faster detection of emerging threats across hybrid infrastructure."

Jackie Smith, Global Vice President, Platforms and ISV Partner Sales at Splunk, commented on the integration's effect on user capability:

"AI continues to be a cornerstone of our strategy to accelerate detection, investigation, and response workflows. With the integration of Gigamon Insights, our joint customers can now fuse network telemetry with the power of AI directly within their existing Splunk workflow, speeding time to insights and helping every user become a security and observability expert."

Olawale Oladehin, Director of Technology at AWS, stressed the importance of broad visibility:

"As organizations accelerate their cloud adoption journey, comprehensive visibility across hybrid environments is no longer optional - it's essential for maintaining robust security posture. Our collaboration with Gigamon brings together AWS's cloud security capabilities with Gigamon network-derived telemetry, helping our joint customers detect threats faster and respond more effectively through AI. This integration shows our commitment to providing customers with powerful tools that enhance their security operations while maintaining the agility and innovation that cloud enables."

Customer control and integration

Gigamon Insights operates on a flexible LLM architecture, allowing customers to select private hosted models or integrate with in-house enterprise AI solutions. This approach grants organisations full control over sensitive data, while extending detection, investigation, and remediation capabilities. Gigamon's strategy is to enable organisations to adopt Insights effectively by leveraging their current data stores, LLMs, and operational processes.

The introduction of Gigamon Insights comes as organisations seek to address the security threats and operational challenges posed by the rise of AI within increasingly complex hybrid cloud infrastructures. Gigamon has detailed that the solution will be made available along with partner integrations in the fourth quarter of 2025, with further partners to be added subsequently.