[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_45L5BDHLk7qGRljk6feHbmyJ9fbVCigzyChQOGVA_c":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":107},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"90894a45-f592-49f4-b1a8-b279649bd930","Begin at the End: How to Enable Agentic Remediation","begin-at-the-end-how-to-enable-agentic-remediation-ad5d64","Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk. The post Begin at the End: How to Enable Agentic Remediation appeared first on SecurityWeek.","The article advocates for 'Shift Zero' by enabling agentic AI for automated vulnerability remediation, moving beyond traditional Continuous Threat Exposure Management (CTEM) which often stalls at the manual mobilization phase. By inverting the CTEM framework to focus on automating the final step of mobilization, organizations can close the loop on exposure management and eliminate vulnerability backlogs.","Article discusses enabling agentic AI for automated vulnerability remediation in cybersecurity.","https:\u002F\u002Fwww.securityweek.com\u002Fbegin-at-the-end-how-to-enable-agentic-remediation\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F01\u002FCybersecurity-Teams.jpg","2026-09-24T11:00:00+00:00","2026-09-24T12:00:33.56913+00:00",7,[17,20,22,24],{"name":18,"type":19},"AI","technology",{"name":21,"type":19},"agentic AI",{"name":23,"type":19},"Continuous Threat Exposure Management",{"name":25,"type":19},"machine learning","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37,42],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":43},{"id":26,"icon":28,"name":29,"slug":30},[],[],{"controls":47,"vendors":106},[48,77],{"slug":49,"name":50,"problem":51,"products":52},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":78,"name":79,"problem":80,"products":81},"soc-automation","SOC automation and AI analysts","Alerts arrive faster than the team can investigate them, so real attacks wait in the queue or are closed unread.",[82,90,98],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter","GreyMatter","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002F","Agentic security operations platform that triages, investigates and responds to alerts across existing SIEM, EDR and cloud tools, with role-based AI teammates.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"torq","Torq","\u002Fvendor-logos\u002Ftorq.png","torq-ai-soc-platform","Torq AI SOC Platform","https:\u002F\u002Ftorq.io\u002Fai-soc-platform\u002F","No-code security automation combined with AI agents, including the Socrates AI analyst, to triage, investigate and respond to alerts across the security stack.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"splunk","Splunk","\u002Fvendor-logos\u002Fsplunk.png","splunk-soar","Splunk SOAR","https:\u002F\u002Fwww.splunk.com\u002Fen_us\u002Fproducts\u002Fsplunk-security-orchestration-and-automation.html","Security orchestration and automation that runs playbooks to investigate and respond to incidents in seconds.",[],{"slug":108,"title":109,"body":110,"framework_refs":111,"framework_notes":119},"automating-vulnerability-remediation-closing-the-ctem-loop-with-agentic-ai","Automating Vulnerability Remediation: Closing the CTEM Loop with Agentic AI","Traditional Continuous Threat Exposure Management (CTEM) frameworks frequently stall at the mobilization phase, leaving organizations with growing vulnerability backlogs despite having identified the risks. The root cause is an over-reliance on manual remediation processes that cannot scale to match the speed and volume of modern threat discovery. Agentic AI offers a paradigm shift — the 'Shift Zero' approach — by automating the final and most critical step: actually fixing the vulnerabilities. Without closing this loop, identification without remediation creates a false sense of security. Organizations that fail to automate remediation workflows remain exposed even when their scanning and prioritization tools are mature.",[112,113,114,115,116,117,118],"CIS Control 7: Continuous Vulnerability Management","CIS Control 16: Application Software Security","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST CSF 2.0: Respond (RS) and Recover (RC) Functions","NIST SP 800-137: Information Security Continuous Monitoring (ISCM)","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities","ITIL 4: Problem Management and Continual Improvement Practices",{}]