Systems and methods for providing automated actions in handling security threats are disclosed. The method includes receiving input data comprising one or more entities and one or more intents. The method further includes extracting the entities and the intents from the input data. In response to determining that there exists at least one actionable entity from the extracted entities, the method further includes presenting a plurality of available security actions to a user to resolve one or more security threats associated with the input data, the available security actions being respectively selectable by the user.