Filigran has unveiled XTM One, an AI-native orchestration layer designed to automate Steady Menace Publicity Administration (CTEM) workflows, as organisations wrestle to maintain tempo with rising volumes of risk intelligence, vulnerabilities and assault information.
The launch displays a broader problem going through safety groups. Whereas many organisations have invested closely in risk intelligence, assault floor administration and safety validation instruments, turning that info into significant motion stays tough. Safety groups are sometimes left transferring manually between platforms to know which threats matter, whether or not they’re exploitable, and what remediation steps must be prioritised.
CTEM has emerged as one of many trade’s most popular frameworks for addressing that drawback. Fairly than counting on periodic assessments, CTEM goals to create a steady cycle of discovery, prioritisation, validation and remediation that adapts as threats evolve. Filigran has been positioning its OpenCTI and OpenAEV platforms as key parts of that strategy, arguing that organisations want to maneuver past merely figuring out vulnerabilities and deal with understanding which exposures current real enterprise threat.
XTM One sits above these platforms as an orchestration layer, coordinating AI brokers throughout the CTEM lifecycle. The corporate says this enables safety groups to automate duties corresponding to intelligence enrichment, risk reporting, assault situation technology and remediation planning with out always switching between instruments.
“The quantity of CVEs, risk actors, and assault campaigns has reached a scale no human group can course of manually,” mentioned Julien Richard, co-founder of Filigran. “XTM One is just not AI as a function. It’s AI because the working system for risk administration. Safety groups deserve automation that works the best way they work.”
The announcement highlights how safety distributors are more and more transferring past AI assistants and copilots in the direction of extra autonomous agent-based techniques. Fairly than serving to analysts full particular person duties, agentic approaches search to coordinate whole workflows throughout a number of merchandise and information sources.
In keeping with Filigran, early customers of its broader XTM Platform have achieved as much as 70% quicker risk detection and response cycles and lowered preparation time for offensive safety testing by as much as 80%.
Business analysts recommend this type of automation might turn into more and more crucial as organisations undertake CTEM programmes at scale.
“As the size of threats outpaces human capability to answer alerts, safety groups are hitting a wall when they should optimize remediation to mitigate safety threat. The shift towards an agentic AI orchestration layer is required for CTEM to assist safety groups scale,” says Melinda Marks, Cybersecurity Apply Director at Omdia. “By leveraging an open-source basis to automate using wanted context for risk intelligence and remediation, Filigran is enabling the pace, transparency, and evidence-based threat discount required to scale defenses on the tempo of the adversary.”
A key facet of the launch is flexibility round AI deployment. Organisations can use Filigran’s fashions or convey their very own massive language fashions by means of BYOLLM help, whereas on-premises deployment choices are supposed to handle information sovereignty necessities in regulated industries and authorities environments.
The corporate additionally believes AI may assist tackle one of many long-standing obstacles to risk intelligence adoption: usability.
“The largest barrier to risk intelligence adoption has at all times been complexity,” mentioned Jean-Philippe Salles, VP of Product Administration at Filigran. “XTM One makes superior risk administration accessible to extra groups by means of pure language interplay. Junior analysts can turn into productive quicker, whereas skilled practitioners achieve automation that removes repetitive work.”
The launch comes as buyers more and more view CTEM and risk publicity administration as considered one of cybersecurity’s subsequent main development classes, notably as organisations search extra evidence-based methods to prioritise cyber threat.
“Filigran is redefining how organisations operationalise risk intelligence at scale,” says Karine Peters, Managing Director at T.Capital. “Their AI-native strategy to prolonged risk administration, mixed with one of many strongest open-source communities in cybersecurity, positions them to guide a class that legacy distributors have struggled to modernise. That conviction is why we invested.”
Whether or not agentic AI turns into the catalyst that lastly makes CTEM achievable for safety groups stays to be seen. What is evident is that as risk volumes proceed to rise, organisations are more and more in search of methods to automate the journey from intelligence gathering to validated defensive motion, quite than merely gathering extra information.
