.webp)
Sumo Logic has introduced a preview of its Root Cause Agent for SRE and DevOps teams, expanding its DojoAI offering into observability.
The agent is designed to take an alert, inspect logs and metrics, and produce what Sumo Logic describes as an evidence-backed assessment of the most likely cause of an incident. Engineers can then review the findings, ask follow-up questions and move to resolution without first collecting incident data by hand.
Root Cause Agent extends DojoAI beyond security-focused use cases. It works alongside the existing SOC Analyst Agent, allowing SecOps and SRE teams to collaborate through a shared case file that includes plain-language findings, a verdict and a query linked to each piece of evidence.
Sumo Logic is addressing a common challenge for operations teams, where large volumes of telemetry and alerts can slow incident response. The announcement also reflects broader competition among software providers to apply AI agents to IT operations, security analysis and internal investigations.
Alongside the preview, Sumo Logic introduced new DojoAI pricing packages built around a single monthly credit pool for an organisation. The approach is intended to give customers more flexibility in how they use different agents while making AI spending easier to manage and forecast.
Under this model, customers can draw credits from one shared pool across tools including Mobot, SOC Analyst Agent, Root Cause Agent and future agents. Sumo Logic says this is meant to reduce the risk of teams hitting usage limits during major incidents.
The company linked the release to customer concerns about both operational workload and cost control. Keith Kuchler, Chief Product and Technology Officer at Sumo Logic, said teams are dealing with investigations that can consume significant time across very large datasets while also facing uncertainty over AI spending.
“Observability teams are challenged with both time-consuming investigations across massive datasets and unpredictable AI costs,” said Keith Kuchler, Chief Product and Technology Officer at Sumo Logic. “We're continuing to deliver new agentic teammates, like Root Cause Agent, which delivers insightful answers in minutes, not hours. And we're pairing them with our new DojoAI packages to provide the proper cost and governance controls teams need to scale their AI usage predictably.”
Sumo Logic pointed to feedback from an existing DojoAI deployment in security operations as evidence for the broader approach. Although the example relates to the SOC Analyst Agent rather than the new Root Cause Agent, it illustrates the company's argument that AI-assisted investigations can reduce manual triage work.
“What used to take our teams hours of manual triage, SOC Analyst Agent brought it down to about five minutes during a large-scale account fraud attack - with Mobot analyzing and flagging the primary and related IOCs involved in the incident, covering the whole attack surface,” said Chris Tziampazis, SecOps Engineer at Lodgify. “As a small security team, we got results as fast and as thorough as what a full investigation team would deliver.”
Root Cause Agent is being released first as a preview for Sumo Logic customers, who can join through their account teams. The launch marks another step in the company's effort to build a broader set of AI agents around security and operational telemetry while tying their use to a single budget framework.