Workflows
Structure and automate your security operations with AI-native flows
Agentic Workflows bring intelligent Directed Acyclic Graph (DAG) structure and automation to your security apps. Use workflows to structure multi-step actions, orchestrate investigations, and automate across data sources and connectors.
Workflows are one of the building blocks that make up an app, alongside queries, canvases, and alerts.
Workflows combine AI-native reasoning with structured execution to overcome single prompts and old school automation limitations, bringing flexibility, transparency, and real-world resilience to your security operations.
Workflow components
Workflows are made up of key components that define how they start, run, and deliver results.
Trigger
Defines when a workflow starts, such as on a schedule (e.g., daily at 10 AM), in response to an event (e.g., a new alert), or manually.
Step / Block
A single action in the workflow, such as running security queries, filtering results, performing cross-platform checks, or sending notifications.
Prompt
The AI instruction that guides a workflow step.
Automation
The ability to automatically gather, analyze, and take action on data (e.g., find users without MFA, determine who has the most permissions, send a Slack message, or create a ticket).
Integrations
Data sources and connectors (e.g., AWS, GitHub, Slack, Jira) for coordinated actions.
Notifications and reporting
Configurable outputs at the end of a workflow to share results, alerts, or summaries with relevant stakeholders.
Execution
A single run of a workflow from trigger to completion, with all steps performed and results tracked for review.
Directed Acyclic Graph (DAG)
The structured visual representation of workflow steps, showing the order, logic, and connections without loops.
Creating workflows
Workflows enable multi-step orchestration and automations that use queries, connectors, and AI to respond to security issues, coordinate actions, and reduce manual effort. They can be used for remediation, enrichment, reporting, and other structured flows directly inside your app.
Each workflow is structured as a Directed Acyclic Graph (DAG), giving you precise control over the order, conditions, and logic of each step. Ensuring consistent, repeatable responses to security events.
To create a workflow, use Sola AI to describe the outcome you want.
Sola AI will build your workflow, adding AI blocks (steps) with prompts, connectors, and logic based on your request. You can then review and adjust each prompt, connected data sources, and actions.
Running and managing workflows
Workflows can be run manually, on a schedule, or triggered by events within Sola. When a workflow runs, each AI block executes in sequence according to the defined sequential logic.
To run a workflow:
Manual run - Trigger the workflow directly from the app.
Scheduled run - Set workflows to run automatically at defined times.
Event-triggered run - Start a workflow based on specific or multiple alerts.
After a run completes, you can review the output for every step to see what actions were taken, what data was used, and the results produced. This provides visibility to validate the workflow’s effectiveness and debug issues.
To manage a workflow:
Edit step prompts - Adjust the instructions for each step manually or with Sola AI.
Update connectors - Change or add integrations used by the workflow.
Adjust logic - Modify conditions, branching, or sequence to adapt to evolving needs.
What makes Sola workflows different
AI-native, not just AI-supported Sola Workflows don’t just use AI, they are AI native. AI drives the logic, flow, and outcomes. This means they can reason and adapt dynamically, making them far more flexible and effective than traditional automations.
Resilient and adaptive execution Traditional automations fail when they hit friction such as missing data, edge cases, or unexpected inputs. Sola’s AI-led workflows adapt in real time. They’re designed to creatively solve blockers, improvise when needed, and maintain progress toward meaningful outcomes.
Deterministic where it matters Sola combines the flexibility of AI with the control of determinism. Enforcing strict and reliable logic for actions where precision is critical. Ensuring predictability and auditability.
Security intelligence built-in Every workflow is grounded in Sola’s domain expertise and understanding of security context. Instead of just executing tasks, workflows reason over identity, access, risk severity, and posture impact, turning automations into intelligent responses.
FAQs
Are workflows only for automating scheduled processes?
No. A single prompt can be used in most cases. However, when running complex and multiple step investigations, workflows can help create a relatively more deterministic outcome, be simpler to debug and provide more transparency into the outcome of each step in a long process.
What data sources and connectors can workflows use?
Workflows can potentially utilize any data source or connector associated with the app it is built in. To do this, data sources and connectors must be associated with the app beforehand. In addition, like the chat, workflows have the native ability to use the web for fetching specific information (with the same compliance and guardrails of the Sola chat).
Last updated
Was this helpful?