Artificial Intelligence1 min read

How Greenlight Financial built an autonomous SOC solution on Amazon Bedrock AgentCore

By · Published by Everything Blog

In short

Greenlight Financial built Luna to efficiently manage 3,000 to 4,000 security and risk alerts arriving each month. Powered by Amazon Bedrock AgentCore inside an Amazon VPC, the platform utilizes a tiered multi-agent supervisor architecture to emulate analyst workflows. A primary supervisor coordinates more than 30 specialized agents that cross-reference identity, endpoint, asset, and payment systems to resolve events. Alerts that cannot be processed automatically are routed to human investigators with full contextual details.

Key points

  • Greenlight processes between 3,000 and 4,000 monthly alerts across financial risk, infras…: Greenlight processes between 3,000 and 4,000 monthly alerts across financial risk, infrastructure, and dark web data.
  • Built-in runtime and memory capabilities in Amazon Bedrock AgentCore eliminated the requi…: Built-in runtime and memory capabilities in Amazon Bedrock AgentCore eliminated the requirement to develop custom underlying infrastructure.
  • Complex security incidents that defy automated resolution are escalated to human analysts…: Complex security incidents that defy automated resolution are escalated to human analysts alongside complete investigation context.

Sources checked by our analysis pipeline: 1

Artificial Intelligence

How Greenlight Financial built an autonomous SOC solution on Amazon Bedrock AgentCore

Greenlight Financial resolves more than 90 percent of up to 4,000 security and risk cases each month without human intervention. Greenlight’s Luna uses Amazon Bedrock AgentCore, infrastructure for building, connecting, and optimizing agents at scale. Specifically, Greenlight uses AgentCore runtime, a capability of Amazon Bedrock AgentCore, to host Luna’s agent code. It uses AgentCore memory, a capability of Amazon Bedrock AgentCore, to support its tiered multi-agent system. This avoids the need to build and operate these capabilities in-house. Luna triages dark web breach-card alerts, identity anomalies, and financial-risk events in seconds.

This post explains how Greenlight Financial built an autonomous security operations center (SOC) solution on Amazon Bedrock AgentCore. We cover its multi-tiered supervisor architecture, more than 30 specialized agents, episodic memory for continuous learning, and expansion from SOC use cases into financial risk triage. We share production metrics, infrastructure decisions, and patterns for building autonomous security operations in regulated industries.

What Greenlight needed to solve

Greenlight Financial provides financial products for families: debit cards, savings…

Artificial Intelligence

More in Artificial Intelligence