<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
<title>Signal in the Noise | Convoy</title>
<link>https://convoy.security/blog</link>
<description>Writing from the people who build Convoy.</description>
<language>en-us</language>
<atom:link href="https://convoy.security/blog/feed.xml" rel="self" type="application/rss+xml"/>
<lastBuildDate>Thu, 01 Oct 2026 00:00:00 +0000</lastBuildDate>
<item>
<title>Why we stopped calling it a SIEM.</title>
<link>https://convoy.security/blog/why-we-stopped-calling-it-a-siem</link>
<guid isPermaLink="true">https://convoy.security/blog/why-we-stopped-calling-it-a-siem</guid>
<pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
<category>Platform</category>
<description>A SIEM collects logs and lets you search them later. Convoy keeps that part and closes the case too. Here&#39;s why we picked a different word.</description>
</item>
<item>
<title>Built for your AI tools to operate. Not to summarize.</title>
<link>https://convoy.security/blog/built-for-your-ai-tools-to-operate</link>
<guid isPermaLink="true">https://convoy.security/blog/built-for-your-ai-tools-to-operate</guid>
<pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
<category>MCP</category>
<description>Every Convoy tenant is open over MCP with 100+ tools. Your AI client gets what our operators use, with roles checked on every call and one audit trail.</description>
</item>
<item>
<title>&#34;Confirmation needed&#34;: why we ask before we act, and when we don&#39;t.</title>
<link>https://convoy.security/blog/why-we-ask-before-we-act</link>
<guid isPermaLink="true">https://convoy.security/blog/why-we-ask-before-we-act</guid>
<pubDate>Tue, 01 Sep 2026 00:00:00 +0000</pubDate>
<category>Operations</category>
<description>When the evidence proves harm, Autopilot acts in seconds. When it can&#39;t prove intent, we ask the one person who knows. Here&#39;s where we draw that line.</description>
</item>
</channel>
</rss>
