Cogent and OpenAI build cyber defense factories for enterprises

Cogent Security has partnered with OpenAI to build Cyber Defense Factories for enterprises, addressing the challenge that remediating vulnerabilities is harder than finding them. These factories use AI agents combining OpenAI's GPT-6.1 Sol, GPT-5.6, and GPT-6 Astra models with Cogent's Context Engine, Agent Policies, TRACE policy-enforcement engine, and Agent Gateway. The Context Engine maintains an enterprise knowledge graph of assets, vulnerabilities, identities, and dependencies, giving agents shared environmental understanding. Agent Policies define permitted changes and approval requirements, while TRACE deterministically checks tool calls against policies before execution. The Agent Gateway independently verifies authorization, with higher-risk work run in isolated sandboxes. Customers can delegate investigation, require approval for changes, or permit bounded autonomous remediation. When critical PHP vulnerabilities called PHP2Shell were disclosed, customers used already-deployed Cyber Defense Factories to identify affected systems, assess exposure, develop remediation plans accounting for dependencies and constraints, orchestrate fixes via customer-defined workflows, and verify resolution. Cogent reports a Fortune 1000 automotive customer reduced mean time to remediate critical vulnerabilities by 75%, and a Fortune 500 IT services customer achieved 5× vulnerability-triage throughput. MarketAxess Global CISO Vijay Bala said Cogent sees the environment as an attacker would, tracing routes from the internet to vulnerable systems and checking controls. Cogent chose OpenAI models for stronger reasoning on long-running security tasks, higher fidelity, fewer hallucinations on technical codebases, and reliable execution, citing cost-efficiency for running large agent swarms. Using OpenAI APIs has streamlined request routing and agent orchestration, reducing engineering overhead and accelerating time-to-market. Most Cogent engineers use Codex for development, reporting higher productivity. Through Trusted Access for Cyber and Daybreak, Cogent receives support for internal red-teaming and attack-path research, with Daybreak Red providing specialized models for authorized offensive and vulnerability research. Cogent plans to expand autonomous remediation to multi-step workflows across enterprise systems and develop autonomous discovery and validation toward a closed-loop system that continuously learns from every vulnerability.

(Source：OpenAI)