An autonomous system is a machine or software agent that can observe its environment, make decisions, and take action with limited human input. It may rely on sensors, rules, models, or feedback loops to choose what to do next. In robotics, that can mean navigation or target recognition; in cyber security, it often means automated tools that analyze events and respond without waiting for a person.
This matters because autonomy increases speed and scale. Defenders use autonomous systems in endpoint protection, network monitoring, and orchestration platforms to spot anomalies, block suspicious activity, or isolate a host quickly. Attackers can also build autonomy into malware, botnets, or recon tools so they can scan, adapt, and select targets with less operator involvement. The risk is that these systems inherit the quality of their inputs: bad telemetry, weak rules, or manipulated data can cause wrong actions. In practice, security teams must tune autonomy carefully, keep human oversight for high-impact decisions, and test how the system behaves under noisy or hostile conditions.