Black Hat USA 2026: Vendors Announce New Security Products and Reports
Summary
A Black Hat USA 2026 vendor roundup covers new security products and updates, including AI-assisted exposure and cloud defense, endpoint controls for coding agents, continuous data classification, and reports on threat hunting and vulnerability remediation.
Key points
- Astelia introduced agentic exposure-management capabilities that assess vulnerability reachability and coordinate remediation, with human approval at key decision points and actions logged.
- AvePoint added continuous data sensitivity classification across business applications and new recovery tools for prioritizing restoration of critical data.
- Cisco Talos research, based on recovered prompt logs, tooling, and threat-actor conversations, describes AI use in malicious code development, fraud infrastructure, and vulnerability research and exploitation.
- Huntress made RMM Guard free to eligible customers; it is designed to detect and block unauthorized remote monitoring and management tools on endpoints.
- Qualys introduced InstaScan, which matches vendor advisories against asset inventory and telemetry to flag potentially affected assets with confidence-scored findings.
- Vicarius reported that 79% of surveyed organizations experienced an incident in the prior 12 months involving a vulnerability already in their inventory; the report also describes gaps in remediation workflows.
Article Details
- Event Type
- Cybersecurity vendor product, service, and research announcements
- Impact
- Vendors announced new or expanded capabilities for AI security and governance, vulnerability and exposure management, incident recovery, cloud defense, identity security, and mobile forensics. Reports also highlighted AI use in cyberattacks and gaps in vulnerability remediation.
Vendors
AsteliaAstelia unveils agentic AI exposure management capabilitiesAvePointAvePoint adds continuous data sensitivity classification to Confidence PlatformCiscoCisco Talos research shows how threat actors are weaponizing AICrowdStrikeCrowdStrike publishes 2026 Threat Hunting ReportDrataDrata extends trust management platform to AI agentsHorizon3.aiHorizon3.ai announced NodeZero WebApp Pentesting, an expansion that enables the NodeZero platform to autonomously and safely test web applications the way attackers operate.HuntressHuntress expands Managed ESPM with free RMM GuardLegit SecurityLegit Security releases VibeGuard 2.0 for coding agent endpoint securityNetskopeNetskope announces DataSec Command CenterProjectDiscoveryProjectDiscovery announces general availability of NeoQualysQualys adds scanless vulnerability detection to ETM platformSailPointSailPoint unveils SailPoint Identity SecuritySectigoSectigo launches automation gateway for certificate lifecycle managementSeviiSevii expands ADR platform with autonomous preemptive security moduleSysdigSysdig launches AI-native offering for cloud runtime defenseTaniumTanium expands Autonomous IT Platform with new agentic and exposure toolsTorqTorq unveils SOC BrainViakooViakoo adds configuration drift remediation module for OT and IoT devicesVicariusVicarius publishes state of vulnerability remediation reportZimperiumZimperium releases automated mobile forensic investigation tool
Products
AI Agent GovernanceDrata has extended its Trust Management Platform, announcing the limited availability of AI Agent Governance, which is designed to help enterprises discover, monitor, govern, and prove traceability of the AI agentsAutonomous Preemptive Security (APS)Sevii announced a major expansion of the Sevii Autonomous Defense & Remediation (ADR) platform with the general availability of an Autonomous Preemptive Security (APS) module.Deep InsightsZimperium has introduced Deep Insights, a mobile forensic investigation tool built to automate analysis of mobile device attacks.Device Configuration Manager (DXM)Viakoo has introduced Device Configuration Manager (DXM), a new module for its Viakoo Action Platform aimed at correcting configuration drift in OT and IoT environments.Kinetic ClassificationAvePoint has introduced Kinetic Classification, a capability that continuously re-evaluates data sensitivity across Microsoft 365, Google Workspace, and other business applications, replacing static, one-time labeling.Neo v1ProjectDiscovery announced the general availability of Neo v1, and a new Pay-as-you-go model.Netskope One DataSec Command CenterNetskope announced its Netskope One DataSec Command Center, a unified control plane that discovers, understands, tracks, and protects sensitive data of any kind wherever it lives and moves, from AI environments to theNodeZero Web Application PentestingHorizon3.ai announced NodeZero WebApp Pentesting, an expansion that enables the NodeZero platform to autonomously and safely test web applications the way attackers operate.Qualys InstaScanQualys has introduced InstaScan, a scanless detection capability inside its Enterprise TruRisk Management (ETM) platform.Rapid RecoveryAvePoint also added new tools to its Rapid Recovery system, including a Rapid Recovery Wizard and Express Recovery for Entra ID, meant to help teams prioritize restoration of critical data after an incident.RMM GuardHuntress expands Managed ESPM with free RMM GuardSailPoint Identity SecuritySailPoint unveils SailPoint Identity SecuritySectigo Orchestration Gateway (SOG)Sectigo has released Sectigo Orchestration Gateway (SOG), a new automation layer inside its Sectigo Certificate Manager (SCM) platform.Sysdig Secure AISysdig has launched Sysdig Secure AI, an AI-native addition to its Sysdig Secure cloud-native application protection platform (CNAPP).Tanium AtlasTanium Atlas now includes Agentic Performance Analysis for root-cause tracing, Background AI Agents that run alert-to-resolution workflows autonomously, and an MCP Server that exposes Tanium data to clients like ClaudeTorq SOC BrainTorq has introduced Torq SOC Brain, a new self-learning layer of its AI SOC Platform that continuously learns from historical investigations, analyst decisions, and organization-specific security operations to create aVibeGuard 2.0Legit Security releases VibeGuard 2.0 for coding agent endpoint security