What is system automation?

2026-07-07Last updated

System automation in Security Center SaaS is a workflow to trigger actions based on schedules or events. It helps administrators manage repeatable tasks with less effort, so they can focus on higher‑value work.

Using system automation, you can trigger actions on a one-time or recurring schedule or following an unexpected system event. You can also trigger automations manually from maps.

Automations can have a single trigger and action, or they can link multiple ones.

Ways to create automations

Automation can be created in several ways:

  • Automation entities are the most comprehensive mechanism for configuring automation in Security Center SaaS. See About automation entities.
  • Threat levels are predefined scenarios that you activate for a specific area or the entire system to manage special situations. See About threat levels.
  • Event-to-actions and scheduled tasks are legacy mechanisms for creating automations.

How automation makes your work easier

  • Reduce time spent on configuration and ongoing maintenance by using automation to handle predictable tasks.
  • Combine multiple triggers, responses, and sources in a single automation to cover broader workflows.
  • Focus on the critical issues that need your attention by automating routine processes in Security Center SaaS.