Origin

Origin

Before Afferentic, I ran technical operations for one of the largest managed detection and response providers in the world. The problem I was solving there is the same problem I am solving now. Just with a different workforce.

The problem at scale

Some of the best security engineers in the industry. Expensive, experienced, in constant demand. And a significant portion of their time consumed by work that — while genuinely complex — followed definable pathways. Something was flagged. An investigation commenced. If they found this, they did this. If they found that, they did that. The paths branched, the decisions multiplied, but every one of them could be mapped.

The expertise was real. But much of it was objective, not subjective. And that meant it could be written down.

The academy

Take every task where the methodology can be defined. Have the senior engineer show an academy member how it is done. The academy member records it, writes the runbook, and from that point forward they handle it.

The runbooks could be as basic or as complex as the task demanded. Some were three steps. Others branched into dozens of decision points — if you see this indicator, investigate here; if that returns clean, check there instead. Every path was objective and explicit. Where a path became subjective — where it required judgement that could not be codified — the runbook said: escalate. That boundary between objective and subjective was the entire architecture.

The cycle that made it work
1Senior engineer shows the academy member how the task is done. The academy member records it and writes the runbook.
2Engineer reviews and approves. Task goes into production — academy member handles it.
3Academy member hits a path the runbook does not cover. Escalates. The resolution defines a new branch in the runbook.
4The runbook covers more ground. The escalations drop. The objective boundary expands.
5The cycle repeats. The library grows. The operation scales.

It worked. People in their first months were handling investigations that had previously required a decade of experience — because every objective pathway was mapped. The senior engineers focused on the genuinely subjective work. And the runbook library became an operational asset that no longer depended on any single person.

Same method. Different workforce.

If the pathway is objective, it can be defined. If it can be defined, it can be followed by someone — or something — other than the person who designed it.

There, the workforce was people following runbooks. At Afferentic, it is systems following the same ones.

They follow the objective pathways — as basic or as complex as the task demands. They branch, they check, they act. And when they reach a point that requires subjective judgement, they escalate — just as an academy member would. Your team makes the call. The resolution defines a new objective path in the system, expanding what it can handle next time.

That is where we start. Objective pathways first — the safest, most predictable ground. But the managed layer can go further. For tasks that involve reasoning — reading context, weighing options, drafting a response — the system handles those too, with your approval gates in place. The boundary between what runs automatically and what routes to a person moves over time, as trust builds and the system proves itself.

The academy cost several years and significant investment to build. The version your business gets starts in week one. The only difference is that we built it first.