Applies To: WatchGuard Cloud
Hey Rai includes predefined agents that specialize in specific, complex tasks. Agents can review data, plan actions, use tools, and make decisions across your managed accounts. There are two autonomy types for Hey Rai agents:
Approval-gated
An approval-gated agent gathers data from across your accounts, then presents you with a plan. It does not change anything in your environment until you approve the plan. If you decline, or if the approval window expires, nothing runs.
Read-only
A read-only agent runs, then presents the outcome to you without making changes in WatchGuard Cloud. Read-only agents run without approval.
Note: Hey Rai uses generative AI. AI-generated output may be inaccurate, incomplete, or out of date. Review and verify all output before relying on it or taking action based on it, including changes to configurations or security policies.
To view the Hey Rai agents, click Agents in the Hey Rai UI. Click an agent on the page to run it.
This table shows the agents in Hey Rai, their autonomy types, and details.
| Agent Name | Autonomy Type | Agent Details |
|---|---|---|
| SOC Operator - Incident Response | Approval-gated | Finds active critical incidents across your managed accounts and creates a containment plan. The plan can isolate endpoints, block IP addresses, block domains, and acknowledge incidents. You can open each incident and review the evidence before you approve the plan. One approval runs the whole plan. A separate approval can undo the actions taken. |
| Rai Security Growth Brief | Approval-gated | Scans your managed accounts for expired or expiring licenses, unallocated seats, and cross-sell opportunities. The agent drafts a brief that shows how your customers can increase their security, with evidence for each recommendation. Initial approval requires you to select whether to scan all accounts or one specific account. The brief does not include pricing, and it is not sent to customers. |
| Support Help Docs | Read-only | Answers product, configuration, how-to, and troubleshooting questions, and provides reference links to official WatchGuard help documentation. The Support Help Docs agent does not read account data or change anything in WatchGuard Cloud. |
| Write Actions Receipt | Read-only | Returns audit receipts and detailed explanations for write actions that Hey Rai performed across your account. |