Target selection has guided traditional pentesting for years, and it now has a second job: directing compute and token budgets to the attack surface assets that actually matter.
Read moreToday we’re announcing the CyCognito MCP server. It makes your attack surface data available to any AI client that speaks the Model Context Protocol, so you can search assets and issues and pull the full record behind both.
Read more about Introducing the CyCognito MCP Server: Full Exposure Context, On DemandToday we’re announcing continuous AI pentesting. It runs always-on across your full external surface, using AI agents to spot overlooked weaknesses, reason through context, and chain the multi-step moves a skilled adversary would. It has already uncovered real exposures in live environments. Here’s how it works.
Read more about Continuous AI Pentesting: What We’re Building, and What It’s Already FindingThe latest CyCognito updates focus on improving posture visibility, expanding user learning in-app, and streamlining asset and issue review.
Read more about What’s New in CyCognito: February 2026 Platform EnhancementsCyCognito adds the ability to discover externally reachable MCP servers and pull them into your asset inventory and security workflows. Check out this post to learn where MCP security breaks, and how it connects to external exposure management.
Read more about Introducing Discovery of Externally Reachable MCP ServicesRecent enhancements include new asset management permissions, Asset List productivity improvements and additional API capabilities for realm freshness and issue lifecycle control.
Read more about What’s New in CyCognito: October 2025 Platform EnhancementsIn the past few weeks we delivered improvements across automation (including Action Rules), APIs improvements, new investigation and management options, and reporting controls for PDFs. Below is a detailed look at what is new.
Read more about What’s New in CyCognito: August 2025 Platform EnhancementsThis month’s CyCognito updates give security teams more precision, clarity, and control in exposure management. With the general availability of Teams for advanced role-based access control and enhanced service evidence for greater detection transparency, users gain deeper insights into their environments. Smarter search, streamlined navigation via the new Quick Start feature, and unified asset management improvements all support faster, more confident decision-making.
Read more about What’s New in CyCognito: July 2025 Platform EnhancementsIn today’s cybersecurity environment, visibility and action are everything. CyCognito’s May updates help security teams move faster, simplify operations, and close critical gaps in protection. From streamlined Azure cloud connector setup to a new WAF protection dashboard, historical DNS tracking, smarter domain discovery, and AI-powered issue verification, these enhancements are built to support proactive exposure management. Discover how these new capabilities can help your team secure what matters most without added complexity.
Read more about What’s New in CyCognito: June 2025 Platform EnhancementsCyCognito’s new Cloudflare integration expands its Cloud Connector capabilities, giving organizations deeper visibility into their external-facing assets. By accessing DNS records managed in Cloudflare, the platform uncovers forgotten or unmanaged domains and IPs that could pose security risks. This automated sync feeds directly into CyCognito’s discovery and testing engine, helping security teams identify vulnerabilities and reduce blind spots. With a quick setup and continuous monitoring, it’s a powerful step toward stronger, more comprehensive attack surface management.
Read more about CyCognito Integrates with Cloudflare for Direct Access to DNSCloud-Native Application Protection Platforms (CNAPPs) offer robust internal visibility, but they often fall short in identifying externally exposed assets and real-world vulnerabilities. This blog explores how CyCognito fills these critical gaps by bringing blackbox asset discovery and dynamic application security testing (DAST) to CNAPP workflows, in partnership with Wiz. Through seedless discovery and over 80,000 active security tests, CyCognito helps uncover hidden risks that internal tools miss, enabling DevSecOps teams to prioritize issues based on actual exploitability. The integration provides seamless data flow between platforms, delivering enriched context and actionable insights that significantly enhance cloud security posture.
Read more about Black Box Discovery and DAST: CyCognito’s Integration with Wiz
