diff --git a/src/content/docs/security-center/cloudforce-one/index.mdx b/src/content/docs/security-center/cloudforce-one/index.mdx
index 40cb8b920a9d6f..522328db2d5319 100644
--- a/src/content/docs/security-center/cloudforce-one/index.mdx
+++ b/src/content/docs/security-center/cloudforce-one/index.mdx
@@ -122,3 +122,15 @@ You can filter **Threat Events** by:
 You can also filter by **Date range**.
 
 Some events will not display **Target Country** and **Target Industry** because they are unknown information. There may be situations where the attacker's information is unknown. When Cloudflare finds a new attacker, the attacker will be assigned a new name.
+
+## Use Cloudy to analyze threat events
+
+You can use Cloudy, Cloudflare's AI Agent, to receive an analysis and summary of threat events.
+
+To analyze threat events using Cloudy:
+
+1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/) and select your account.
+2. Go to **Security Center** > **Threat Intelligence**.
+3. Go to **Threat Events** > **Analyze with Cloudy**.
+
+Cloudy will show you the top threat events, analyze them, and give you a summary of threat events. You can also decide to receive an analysis based on **Attacker**, **Indicator**, and more. For example, you can enter "Give me a summary of threat events for ABC Attacker". Cloudy will then summarize threat events for ABC attacker.
\ No newline at end of file