Illumio Graph Agent
Illumio, Inc. · Cybersecurity & IT
Certification per Microsoft Marketplace.
Evidence tier Source Confirmed · 8 captures on record
What the publisher says
As described on Microsoft Marketplace.
The Illumio Insights Graph Agent is an advanced cloud security capability that uses AI-driven correlation to connect Illumio Insights data with the Microsoft Security Graph and the Microsoft Sentinel data lake, enabling deeper threat investigations and enriched context across hybrid and multi-cloud environments. Illumio aggregates resource-centered data — risky traffic, malicious IPs, and shadow LLM activity linked to specific resources by resource ID — and makes it queryable as a security graph. The agent surfaces hidden relationships and attack paths by backtracking from malicious IPs to the resources communicating with them, using 1-hop and 2-hop neighbor discovery, so SOC analysts, incident responders, and threat hunters can uncover sophisticated attack patterns, prioritize the highest-risk events, and accelerate root-cause analysis.
Key Benefits:
Show the rest of the publisher’s description (9 more lines)
- Cross-platform correlation at scale: Automatically fuses Illumio Insights findings with Sentinel’s data lake to provide a unified view of threats across millions of workloads
- Deeper, AI-powered context: Surfaces relationships, anomalies, and behaviors that enrich findings with evidence, reducing false positives and accelerating investigations
- Actionable threat intelligence: Empowers analysts to validate findings faster, pinpoint attack paths, and take informed response actions with confidence
Agent tasks: malicious IP graph query, 1-hop neighbor discovery, 2-hop neighbor discovery, malicious-IP attack-path backtracking, resource relationship mapping, risky-traffic correlation, cross-domain threat enrichment, root-cause analysis
Agent workflow
Input: malicious IP address or resource ID, Illumio Insights graph data, Microsoft Sentinel data lake resource-centered data (risky traffic, malicious IPs, shadow LLM indicators), resource inventory metadata, investigation time range
Output: malicious-IP neighborhood graph, ranked 1-hop and 2-hop neighbor lists, backtracked attack paths, impacted resource inventory, risk-prioritized findings, natural-language investigation summary, recommended response actions
Note:
For a more interactive experience, including the ability to ask follow-up questions during investigations, use the Security Copilot interactive chat.
Preview
5 images
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMP AuthorizedConfirmed95%, domain-verifiedIllumio Government Cloud is FedRAMP Authorized at Moderate impact (domain match)FedRAMP Marketplaceregistry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment
Plans and pricing as listed
1 listedSources
Publisher resources
4 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.