NBIM security team deploys production multi-agent React-loop architecture for cyber triage
A manager agent orchestrates specialized sub-agents (threat intel, log analysis, user behavior) each running bounded React loops, cutting 2 AM investigation time from hours to 10-15 minutes with 90-95% accuracy.