{"id":"https://openalex.org/W7110871507","doi":"https://doi.org/10.48550/arxiv.2512.06659","title":"The Evolution of Agentic AI in Cybersecurity: From Single LLM Reasoners to Multi-Agent Systems and Autonomous Pipelines","display_name":"The Evolution of Agentic AI in Cybersecurity: From Single LLM Reasoners to Multi-Agent Systems and Autonomous Pipelines","publication_year":2025,"publication_date":"2025-12-07","ids":{"openalex":"https://openalex.org/W7110871507","doi":"https://doi.org/10.48550/arxiv.2512.06659"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2512.06659","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2512.06659","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2512.06659","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Vinay, Vaishali","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Vinay, Vaishali","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.2680000066757202,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.2680000066757202,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.04600000008940697,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.03790000081062317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.5723000168800354},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5351999998092651},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.4424999952316284},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.4115999937057495},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.392300009727478}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6880000233650208},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5723000168800354},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5351999998092651},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.5080999732017517},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.4424999952316284},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.4115999937057495},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.392300009727478},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.373199999332428},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.34060001373291016},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.28780001401901245},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2750000059604645},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.2549999952316284}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2512.06659","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2512.06659","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2512.06659","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2512.06659","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5046680569648743}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Cybersecurity":[0],"has":[1,59],"become":[2],"one":[3],"of":[4,8,80,90],"the":[5,57,147],"earliest":[6],"adopters":[7],"agentic":[9,91,178],"AI,":[10],"as":[11,102,155],"security":[12],"operations":[13],"centers":[14],"increasingly":[15],"rely":[16],"on":[17,176],"multi-step":[18],"reasoning,":[19,163],"tool-driven":[20],"analysis,":[21],"and":[22,52,77,99,113,130,164,185,193],"rapid":[23,62],"decision-making":[24],"under":[25],"pressure.":[26],"While":[27],"individual":[28],"large":[29],"language":[30],"models":[31],"can":[32],"summarize":[33],"alerts":[34],"or":[35],"interpret":[36],"unstructured":[37],"reports,":[38],"they":[39],"fall":[40],"short":[41],"in":[42,93],"real":[43],"SOC":[44],"environments":[45],"that":[46,150],"require":[47],"grounded":[48],"data":[49],"access,":[50],"reproducibility,":[51,129],"accountable":[53],"workflows.":[54],"In":[55,132],"response,":[56],"field":[58],"seen":[60],"a":[61,87,173],"architectural":[63],"evolution":[64],"from":[65,105],"single-model":[66],"helpers":[67],"toward":[68],"tool-augmented":[69],"agents,":[70],"distributed":[71],"multi-agent":[72,110,160],"systems,":[73],"schema-bound":[74],"tool":[75,126],"ecosystems,":[76],"early":[78],"explorations":[79],"semi-autonomous":[81],"investigative":[82],"pipelines.":[83,115],"This":[84],"survey":[85],"presents":[86],"five-generation":[88],"taxonomy":[89],"AI":[92,179],"cybersecurity.":[94],"It":[95],"traces":[96],"how":[97,177],"capabilities":[98],"risks":[100],"change":[101],"systems":[103],"advance":[104],"text-only":[106],"LLM":[107],"reasoners":[108],"to":[109,140,189],"collaboration":[111],"frameworks":[112],"constrained-autonomy":[114],"We":[116],"compare":[117],"these":[118],"generations":[119],"across":[120],"core":[121],"dimensions":[122],"-":[123],"reasoning":[124],"depth,":[125],"use,":[127],"memory,":[128],"safety.":[131],"addition,":[133],"we":[134,145],"also":[135],"synthesize":[136],"emerging":[137],"benchmarks":[138],"used":[139],"evaluate":[141],"cyber-oriented":[142],"agents.":[143],"Finally,":[144],"outline":[146],"unresolved":[148],"challenges":[149],"accompany":[151],"this":[152,170],"evolution,":[153],"such":[154],"response":[156],"validation,":[157],"tool-use":[158],"correctness,":[159],"coordination,":[161],"long-horizon":[162],"safeguards":[165],"for":[166],"high-impact":[167],"actions.":[168],"Collectively,":[169],"work":[171],"provides":[172],"structured":[174],"perspective":[175],"is":[180,187],"taking":[181],"shape":[182],"within":[183],"cybersecurity":[184],"what":[186],"required":[188],"ensure":[190],"its":[191],"safe":[192],"reliable":[194],"deployment.":[195]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-12-10T00:00:00"}