DISA chooses AttackIQ as DoW's AEV platform. 0 Comments On August 4, AttackIQ, a provider of threat-informed Continuous Threat Exposure Management (CTEM), announced that after a lengthy analysis of alternatives, the Defense Information Systems Agency (DISA) has selected AttackIQ as the enterprise platform for Adversarial Exposure Validation (AEV) across the Department of War (DoW). The deployment establishes a common operational capability that enables all DoW components to continuously validate the effectiveness of its cyber defenses against real-world adversary behavior while providing Department leadership with enterprise-wide visibility into cyber readiness. The deployment will be implemented by DISA and will be supported across the DoDIN, creating the Department's first enterprise-wide capability for continuously measuring defensive effectiveness through evidence-based adversary emulation. Rather than relying solely on vulnerability data or periodic assessments, AttackIQ enables organizations to continuously prove whether security controls, detections, and defensive processes will perform against the adversary techniques most likely to target their mission. As part of the deployment, the Department will also leverage AttackIQ AVA Agentic OS, the industry's first agentic operating system purpose-built for cybersecurity missions, together with Watchtower, AttackIQ's Hyper-Localized AI Cyber Threat Intelligence Analyzer. These AI-powered capabilities support the Department's broader strategy to modernize cyber operations by accelerating the operational use of artificial intelligence to automate cyber analysis, prioritize mission-relevant threats, and continuously optimize defensive operations. Beyond establishing the Department's enterprise platform for Adversarial Exposure Validation, the deployment includes AVA Agentic OS and Watchtower to automate complex cyber missions through teams of specialized AI agents. Together, these capabilities continuously analyze mission-specific threat intelligence, identify the adversary techniques most relevant to each Defense Agency, orchestrate autonomous validation missions, optimize defensive controls, and provide Department leadership with a real-time understanding of the effectiveness and readiness of cyber defensive operations across the global enterprise. "The future of cyber defense is not measured by how many vulnerabilities are discovered - it is measured by how effectively organizations can validate and optimize their ability to defeat real adversaries," said Carl Wright, chief commercial officer of AttackIQ. "By standardizing on AttackIQ as its enterprise Adversarial Exposure Validation platform, the Department of War is establishing a common operational framework for continuously measuring cyber readiness while leveraging AI to automate analysis, prioritize operational risk, and optimize defensive operations at enterprise scale." IC News delivers the situational awareness you need to get ahead and stay ahead in the IC contracting space. Subscribe today for full access to 10,000+ articles, plus new articles each weekday.

AttackIQ Launches AVA Agentic OS. AttackIQ has introduced AVA Agentic OS, an agentic operating system built to help organizations operationalize Continuous Threat Exposure Management (CTEM) by automating and streamlining exposure assessment and security validation. CTEM has emerged as the strategic framework for managing cyber risk, yet many organizations continue to struggle to operationalize CTEM across fragmented security technologies, disconnected workflows, and manual processes. Security teams have invested heavily in tools that identify risk, but they lack an intelligent operational layer that continuously transforms intelligence into action. AVA Agentic OS fills that gap. With AVA OS, AttackIQ is redefining how organizations operationalize Continuous Threat Exposure Management (CTEM). Rather than automating individual tasks, AVA OS orchestrates teams of specialized AI agents into autonomous cybersecurity missions that continuously discover, validate, and reduce threat debt - helping organizations focus resources on the exposures that matter most. By coordinating cyber threat intelligence, security validation, detection engineering, control optimization, threat debt reduction, and AI security validation into unified operational workflows, AVA OS transforms CTEM from a strategic framework into a continuously executing operational capability. CTEM Runs on AVA OS. "Organizations don't have a CTEM strategy problem - they have a CTEM execution problem," said Carl Wright, Chief Commercial Officer at AttackIQ. "AVA OS is the operational layer that makes Continuous Threat Exposure Management executable. It coordinates specialized AI agents that continuously perform the work required to discover, validate, and reduce threat debt. The next generation of cybersecurity operations will be built on specialized, mission focused agentic systems." Operationalizing CTEM. AVA OS provides the orchestration layer that enables organizations to continuously execute CTEM across the enterprise. AVA OS can be invoked through the AttackIQ Platform, AI developer environments such as ChatGPT, Claude, Cursor, and Microsoft Copilot, or directly from AI-native applications and partner solutions. Regardless of where work begins, AVA coordinates specialized AI agents that execute complete cybersecurity missions from start to finish. Rather than requiring security teams to manually coordinate threat intelligence, validation, detection engineering, control optimization, and remediation across disconnected technologies, AVA orchestrates these activities into autonomous operational missions. Those missions include: * CTI-Driven Validation Transforms cyber threat intelligence into validated defensive readiness by researching adversaries, mapping MITRE ATT&CK(R) techniques, generating attack scenarios, executing validations, measuring defensive effectiveness, and prioritizing Threat Debt reduction. * Detection Coverage Analysis Continuously discovers gaps in detection coverage, identifies blind spots, generates and validates new detections, and measures detection improvements across the enterprise. * Control & Defense Optimization Evaluates security controls against real-world attack techniques, identifies ineffective defenses, prioritizes improvements, validates security controls, and measures defensive effectiveness. * Threat Debt Reduction Exposes true adversary opportunity as attack paths, identifies where existing controls already defeat them, and prioritizes the work that measurably reduces threat debt. * AI Security Validation Enables organizations to confidently deploy AI by continuously discovering unknown AI risks, validating AI guardrails, simulating adversarial attacks, and measuring the security posture of AI applications and autonomous agents. Together, these autonomous missions transform CTEM from a periodic assessment into a continuously executing operational capability that produces measurable reductions in cyber risk. Open by design. AVA OS is built on an open, extensible architecture designed to integrate with the technologies organizations already use. Whether initiated from the AttackIQ Platform, AI developer environments, partner solutions, AI-native applications, or future enterprise AI ecosystems, every mission is orchestrated through the same operational layer. Organizations can embed autonomous CTEM into existing workflows without replacing current security investments, allowing security teams, developers, partners, and enterprise applications to leverage the same orchestration engine regardless of where work begins. From security activities to security outcomes. Today's security leaders are measured by outcomes, not activity. Success is no longer defined by the number of vulnerabilities patched or alerts investigated, but by the ability to continuously demonstrate measurable reductions in threat debt. AVA OS enables organizations to answer the questions that matter most: * Are Digital IT News resilient against today's adversaries? * Where are its detection gaps? * Which security controls are measurably reducing risk? * Which remediation activities will have the greatest impact? * Can Digital IT News confidently deploy AI across the enterprise? By continuously executing operational missions, AVA transforms CTEM from a strategic framework into a continuously operating capability that delivers measurable, evidence-based cyber resilience. "AI-driven attacks are increasing in speed and scale, creating incidents that are harder to predict, faster to unfold and more complex to manage," said Chris Foster, US Cyber Resilience and Defense Lead at Accenture. "To stay ahead, Accenture and AttackIQ are helping clients operationalize CTEM with intelligent orchestration and evidence-based security operations, giving teams a continuous way to reduce exposure and accelerate the shift to autonomous cyber operations." Forward Deployed Engineering. To help organizations move quickly, AttackIQ is also introducing Forward Deployed Engineering. AttackIQ Forward Deployed Engineers embed with customer teams to identify and address mission challenges, rapidly integrating AVA Agentic OS into their security operations and leaving enduring capability the customer's team runs. See AVA Agentic OS in action. AttackIQ will debut AVA Agentic OS at Black Hat USA. Visit AttackIQ Booth #1957 for live demonstrations of autonomous missions and learn how AVA Agentic OS operationalizes Continuous Threat Exposure Management.

AttackIQ, a cybersecurity firm specialising in threat-informed Continuous Threat Exposure Management (CTEM), has launched AVA Agentic OS. The system is designed to help organisations operationalise CTEM by coordinating specialised AI agents to continuously discover, validate, and reduce threat exposure. AVA OS orchestrates AI agents across cyber threat intelligence, security validation, detection engineering, and control optimisation into unified operational workflows. The platform can be accessed through the AttackIQ Platform, AI developer environments like ChatGPT and Claude, or partner solutions. The company is also introducing Forward Deployed Engineering, where AttackIQ engineers embed with customer teams to integrate AVA into their security operations. AttackIQ will demonstrate the system at Black Hat USA.