ArmorCode recently a major expansion of its Agentic Control Plane. Four new Anya AI agents help security teams analyze cloud risks, assess vulnerability exploitability, identify mitigation strategies, and coordinate patch orchestration.
It also unveiled new Context Risk Graph capabilities for expanded attack path analysis, network reachability and patch management. Together, these enhancements help security teams move beyond vulnerability discovery to accurately and quickly prioritize and remediate the risks that matter most, while reducing duplicate AI analysis and operational costs.
ArmorCode looks to solve a number of challenges by giving AI agents the context they lack. The expanded Context Risk Graph builds on ArmorCode’s existing vulnerability insights model, which connects security findings with asset inventory, ownership, business context, threat intelligence and remediation data.
New Context Risk Graph capabilities include:
- Expanded Attack Path Analysis: Uses vulnerability insights to correlate findings and environmental context, determine what’s reachable and exploitable, and generate high-fidelity attack path visualizations.
- Network Topology and Reachability Context: Traces how exposures connect across applications, clouds, containers, infrastructure and network environments.
- Patch Management Integration: Helps teams understand patch availability, plan remediation and coordinate action through existing systems.
- Existing Compensating Control Integration: Connects with technologies such as web application firewalls (WAFs) and endpoint detection and response (EDR) platforms to reduce exposure while permanent fixes are underway.
The expanded Context Risk Graph provides Anya’s agentic workforce with a richer understanding of enterprise risk. New and existing Anya agents act on this enriched context to determine what presents a real attack path, identify the right response and accelerate remediation, allowing teams to reuse trusted context instead of repeatedly building separate agents or paying for the same analysis multiple times.
Purpose-built Anya agents are grounded in the data unified within the ArmorCode platform, which processes more than 300 billion findings annually across more than 375 integrations. Organizations can use prebuilt agents or create custom agents through the Anya harness to support their own security processes and policies.
Helping security teams take action faster, the new Anya AI agents include:
- Vulnerability Researcher: Investigates the real-world exploitability of a CVE within an organization’s environment and explains how it could be used in an attack.
- Mitigation Engineer: Works with existing compensating controls, including WAF rules and EDR policies to contain risk until a permanent fix can be applied.
- Cloud Security Engineer: Evaluates cloud misconfigurations and exposures against the broader environment to identify risks with meaningful business impact.
- Patch Orchestrator: Plans and sequences patch rollouts across affected systems to support efficient remediation with minimal disruption.
