Automation pressure is the tendency for software to replace, compress, or reshape work that people used to do manually. In cyber security, it appears when tools automate tasks such as log review, alert triage, phishing detection, vulnerability scanning, and account monitoring. The pressure does not always eliminate jobs; it often changes which parts of the work matter most.
This term matters because attackers also use automation. Bots can spray passwords, scan exposed services, register lookalike domains, or generate phishing at scale, making fast and repetitive defenses essential. Defenders respond with SOAR workflows, detection rules, and machine-learning filters to handle volume, but those tools still need human judgment for context, escalation, and false-positive review. Understanding automation pressure helps teams design workflows that use machines for speed and people for decisions, which is often the most resilient security model.