Ep072: From Alerts to Action - How Datadog Manages Security Incidents with AI

Dr. Yanbing Li, Chief Product Officer at Datadog, outlines how the company has integrated AI and automation into its incident response framework, helping customers manage both traditional security challenges and emerging AI-specific risks.

Topics Include:

• Introduced talk about incident response and CISO liability
• Datadog founded 14 years ago for cloud-based development
• Platform unifies observability and security for cloud applications
• Current environment has too many fragmented security products
• SEC requires material incident reporting within four days
• Datadog's incident response automates Slack room creation
• Response team includes Legal, Security, Engineering, and Product
• System tracks non-material incidents to identify concerning patterns
• Real-time telemetry data drives incident management automation
• On-call capabilities manage escalation workflows
• Datadog uses own products internally for incident response
• Company focuses on reducing time to incident detection
• AI brings new risks: hallucination, data leaks, design exploitation
• Bits.ai launched as LLM-based incident management co-pilot
• Tool synthesizes events and generates incident summaries
• Bits.ai suggests code remediation and creates synthetic tests
• Security built into AI products from initial design
• Prompt injection prevented through structured validation approach
• Sensitive data anonymized before LLM processing
• Engineering and security teams collaborate closely on AI
• LLM observability becoming critical for production deployments
• Customers need monitoring for hallucinations and token usage
• Datadog extends infrastructure monitoring into security naturally
• Company maintains strong partnership with AWS
• Q&A covered Bits.ai proactive capabilities and enterprise differentiation

Participants:

Yanbing Li – Chief Product Officer - Datadog

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon/isv/