One incident. Your authority. Watch what changes.
Athena reads the telemetry, reasons about the threat and acts, but only as far as you allow. Turn the dial from advisory to lights-out, or set authority per domain, and the same incident resolves differently. Every action is reversible and recorded.
Illustrative. Synthetic incidents and figures: a faithful representation of how the operating model behaves, not a live system.
Authority is yours. Athena operates inside it.
Pick an incident, then set your authority: one mode for everything, or per domain in Hybrid. The flow re-decides live, showing what Athena runs on its own, what waits for you, and what it only recommends.
Four modes on one dial, plus a matrix for the nuance.
No one should trust a black box on day one. Most teams start supervised on high-blast-radius domains, then turn the dial up domain by domain as the evidence builds. Hybrid is how that looks in practice: autonomous on endpoint and email, supervised on identity and cloud, advisory on production change.
See it on your environment.
A 30-minute briefing: your incidents, your authority model, and a live look at how Athena would operate inside it.