Quantro Security Inc., an artificial intelligence-driven cybersecurity startup developing autonomous AI agents for vulnerability management and enterprise risk analysis, launched today with its first product, VM.Analyst.

The company was built by architects who previously held engineering and product leadership roles at CrowdStrike Holdings Inc., Tenable Holdings Inc. and Qualys Inc. They’re building a new automated agentic army of defense for security teams.

The cybersecurity landscape has reached a breaking point where identifying risk is no longer the challenge versus the bottleneck being the speed of response. The company argues that with the cost of exploiting a vulnerability essentially falling to zero, unskilled attackers powered by AI can weaponize exploits within minutes of disclosure, making traditional manual defense and time-to-patch metrics obsolete. Moreover, security teams are drowning in a sea of risk findings from multiple siloed tools and spend too much time triaging false positives or non-exploitable risks, distracting them from their primary mission of reducing real exposure.

VM.Analyst integrates directly with an organization’s existing cybersecurity stack, ingesting data from a wide array of sources, including vulnerability management platforms, cloud security suites, configuration management databases and firewalls. The offering normalizes the data, deduplicates risks and makes the data available for reasoning for its AI agents.

The idea is that by reasoning across disparate data sets with human-level expertise, VM.Analyst provides a unified layer of actionable intelligence to reduce risk.

The agent autonomously assesses the entire risk landscape within the specific context of the organization’s unique environment while also accounting for compensating controls and security configurations. VM.Analyst pinpoints exactly where actual risks lie and provides the necessary actions to remediate them while also keeping a human in the loop and acting before an attacker can exploit the vulnerability.

Security analysts can interact with the agent to obtain instant insights and recommendations or simply delegate tasks to achieve specific outcomes. Every action is handled through a simple, natural-language prompt, whether the goal is maintaining compliance, reducing risk, or executing remediation.

“AI’s real power is its ability to deliver outcomes previously unattainable,” said co-founder and Chief Product Officer Mehul Revankar. “For the first time, organizations can tailor risk assessment to their own security controls, pinpoint what is truly exploitable and eliminate those exposures before attackers strike.”

Quantro has raised early-round venture capital funding but has not disclosed the amount. Backers include Gradient, Google LLC’s early-stage AI venture fund.

Image: SiliconANGLE/Ideogram