Agent Index by Heritage Services
Submit / Claim
Home / Agents / ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents)

ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents)

Vendor: ManageEngine (Zoho Corporation) · HQ: India · Category: Security

Last verified · Added · 7 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

Log360 Cloud is ManageEngine's cloud SIEM. Its Zia layer includes an Investigation Agent (documented on the Log360 Cloud Zia help page, last updated 30 Apr 2026; Cloud What's new lists an Alert Investigation Agent on 12 May 2026) that runs a structured, multi-stage analysis across related alerts, entities and raw logs. It correlates events, checks entity risk with threat intelligence such as VirusTotal and Log360's Advanced Threat Analytics, reconstructs the attack chain and produces an export-ready report, and analysts can pause, resume or query it. The 20 May 2026 Cloud release added Zia Agent Studio, Ask Zia, MCP and the Zia Agent Store with two prebuilt agents: an Alert Correlation Agent that links alerts into a probable attack chain with MITRE ATT&CK stage labels, and a User Activity Review Agent that compiles a user's logons, file access and alerts for audits, pre-termination reviews and investigations. Zia Agent Studio lets teams build custom agents with their own instructions, knowledge base (SOPs, runbooks), Log360 and ManageEngine/Zoho API tools and guardrails, choosing Zoho or third-party LLMs. Agents can pull context from Endpoint Central, ServiceDesk Plus and Site24x7, and every session is logged with the tools called. Log360 Cloud also connects to external AI clients through the Zoho MCP Server. These features are documented for Log360 Cloud only, not the on-premises edition. ManageEngine is the IT management division of Zoho Corp. (same group as the Zoho Zia Agents platform listing); listed as India per the owner's Zoho/ManageEngine rule. Pricing is not published on the pages checked.

Frameworks

No framework tags verified yet.

Pricing (as published)

Not published

India relevance

ManageEngine is part of the Chennai-based Zoho group, with a large Chennai campus and offices across India; ManageEngine products are widely used by Indian IT teams.

Tasks

security operationsalert triagecase investigationthreat detectionincident response

Sources

  1. manageengine.com/log-management/ai-security/ai-agents-for-security-operations.html (primary)
  2. manageengine.com/log-management/help/zia/cloud-zia-overview.html
  3. manageengine.com/log-management/cloud/features-new.html
  4. manageengine.com/ai-agents.html
  5. manageengine.com/news/autonomous-ai-capabilities-manageengine-suite.html
  6. manageengine.com/about-us.html
  7. manageengine.com/contact.html

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email sales@heritageservices.online. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Use-case comparisons

Compare ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents) with

Alternatives

  • 7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
  • Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
  • Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
  • Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
  • Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
  • Attic IVON (Agentic MDR for Microsoft 365) — Dutch AI SOC agent for Microsoft 365 SMBs that triages, investigates and contains identity alerts across Defender, Sentinel and Entra ID with human sign-off.

See all ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents) alternatives →

Stay updated

We use your email only to send the newsletter. See our privacy policy.