TENEX.AI and Sunrun Partner to Deliver AI-Powered Security for Maximum Efficiency and Value

A Case Study in Modern Security Transformation

Security leaders face a universal challenge: How do you maintain robust security coverage against an endless flood of alerts while simultaneously adhering to strict budget constraints? The cost of hiring enough security personnel to manage the sheer volume of threats is unsustainable. For Sunrun, the solution wasn’t incremental; it was a bold, revolutionary overhaul which included  partnering with TENEX.AI and Google Unified Security.  They pioneered a new agentic AI Security Operations Center (SOC) and the transformation was immediate and dramatic: resulting in a 97% reduction in alert volume and a massive cut in average threat dwell time from 72 hours to less than 24 hours. This strategic move didn’t just save money; it freed their expert analysts to focus on strategic playbooks and proactive defense, fundamentally strengthening the company’s security posture.

Want to know the exact blueprint for this success?

Here’s the step-by-step process they followed:

1. Optimizing SOC Performance

Sunrun’s security team recognized the opportunity to elevate their already robust SOC by tackling alert fatigue, a common challenge in high-growth enterprises. Analysts were spending the majority of their shifts triaging high-volume, low-fidelity alerts, which slowed their ability to conduct deep threat hunts and build advanced defenses. Sunrun sought a strategic solution to optimize response times and maximize analyst impact.

2. The Analyst Experience: The Human Cost of Unassisted Alert Fatigue

Before the shift to agentic AI, Sunrun’s analysts were highly skilled but constrained by the sheer volume of signals. While threats were managed, the constant prioritization of noise over deep analysis meant opportunities for proactive defense were limited. Sunrun aimed to unlock this strategic potential by offloading the repetitive work of alert triage. “Sunrun’s impressive reduction in security statistics after deploying their AI solution understandably raised internal questions about potential blind spots in their new data.” Comments Eric Foster, CEO of Tenex.AI, “This proactive introspection led them to Tenex for validation, a testament to our recognized expertise in Google SecOps and cutting-edge agentic Security Operations Center (SOC) capabilities.” 

3. Designing Agentic AI Architecture for Actionable Security

Sunrun leveraged AI, built on Google Unified Security, and partnered with Tenex.AI for data optimization and AI best practices consultation. The system was designed to enhance, not replace, security analysts by providing precision. AI agents automate the pre-triage, correlation, and enrichment of alerts using browser logs and endpoint telemetry. This process filters out noise and assembles context, surfacing only high-fidelity incidents that require human judgment. This approach allows security experts to focus on high-impact decisions while retaining final authority.

4. Measurable ROI: Quantifying Efficiency and Analyst Empowerment

The implementation fundamentally transformed both daily operations and the overall security posture. By reducing the alert volume by 97%, thousands of disruptive, low-priority signals were condensed into a focused, high-value incident queue that is far more manageable. Average dwell time plummeted from 72 hours to under 24 hours. This reclaimed time was immediately reinvested by analysts into writing advanced playbooks, conducting proactive threat hunts, and hardening critical systems. “Tenex.AI stands alone as one of the only providers to natively embed AI into our core service delivery. This isn’t just an efficiency gain; it’s a strategic shift that dramatically elevates analyst productivity and fundamentally lowers the total cost of ownership for companies relying on a robust SOC.” Eric Foster, CEO of Tenex.AI explains, “The conventional problem is alert fatigue, causing organizations to simply disable critical security alerts. Our AI-powered strategy solves this: it provides the necessary, scalable capacity for the AI to triage and assist in triaging EVERY alert. This guarantees comprehensive oversight and superior alert correlation across the entirety of the security environment.”  Meet with TENEX.AI and learn the architecture that drove a 97% alert reduction.

5. Implementing Guardrails: Governance and Mitigation

Sunrun approached the deployment of agentic AI with a clear governance framework to ensure safety and trust:

Challenge	Issue	Mitigation
Over-Reliance on Automation	AI was initially used for enrichment and triage, but not for final disposition.	Human checkpoints are mandatory for high-severity incidents, supplemented by regular red-team validation to test agent efficacy against novel threats.
Telemetry Gaps	Incomplete visibility of security data, context and reduced enrichment quality.	Sunrun prioritized Google Unified Security for the foundational component of their security stack and looked to Tenex.AI to verify their deployment.
Analyst Skepticism and Change Management	Ensuring analyst trust and adopt the new system.	The team ran parallel pilots and offered transparent agent reasoning logs.

Conclusion: AI Has Transformed The Future of Security, Elevating Human Potential

Sunrun’s experience confirms that agentic security operations, when strategically implemented with rich telemetry and human oversight, is a force multiplier for the modern SOC. Instead of replacing security personnel, it dramatically amplifies their existing expertise, allowing the team to focus on strategic impact. Security leaders struggling with alert fatigue should begin with a focused pilot to measure alert reduction, dwell time, and analyst time reclaimed, then iterate quickly based on results. “Sunrun’s embrace of agentic AI marks the dawn of a new era in their security operations, where proactive defense becomes the norm, ensuring resilience against tomorrow’s threats.” said Eric Foster, CEO of TENEX.ai “For security leaders everywhere, Sunrun’s transformation is a clear call to action. My advice to fellow defenders is simple: stop trying to out-hire the adversary and start empowering your team with the AI-native architecture necessary to out-think them.  You too can turn overwhelming alerts into strategic advantages.”  Sunrun’s success is a blueprint for security leaders facing alert fatigue and budget constraints. Don’t wait for the next incident to act, 10X your cybersecurity now! See the Results Live: Start a free demo to experience how our solutions boost efficiency and threat response.