We discuss why the promise of automating cybersecurity has yet to be fully realized.