Black Hat USA 2026, Las Vegas — Cymulate, the leader in exposure validation and cyber defense engineering, today announced a major expansion of its AI innovation strategy with the introduction of Cymulate Cowork, the Cymulate Claude Plugin and the Cymulate Model Context Protocol (MCP) Server.

Launched at Black Hat, this Cymulate innovation is the next step in the evolution of Cymulate Vero AI and the Cymulate vision for agentic cyber defense engineering. As an agentic AI system, Vero AI powers the Cymulate Platform to integrate and execute exposure validation across security workflows with automation guided by security expertise.

“Security teams are asked to move faster than ever, but the work of cyber defense is still too manual, too fragmented and too dependent on scarce expertise,” said Avihai Ben-Yossef, CTO and Co-founder of Cymulate. “With Cymulate Cowork, the Cymulate Claude Plugin and our MCP server, we are giving customers the flexibility to apply AI in the way that best fits their environment, embedding validation into security operations, detection engineering and exposure management workflows.”

Cymulate Cowork: Agentic AI for Cyber Defense Engineering

As an agentic SaaS extension to the Cymulate Platform, Cymulate Cowork gives users the ability to create recurring scheduled workflows through plain language prompts. Cymulate Cowork assembles the right agents, skills and trusted integrations that gather context, analyze risk, create assessments, validate security and drive action across Cymulate and the broader security ecosystem.

With Cymulate Cowork, security teams can:

  • Command autonomous cyber defense workflows in plain language by telling Cowork what they want to accomplish, such as validating exposure to a new threat, assessing mitigation effectiveness or preparing an executive risk summary

  • Automate recurring routines that run on demand, on a schedule or with approval, including emerging threat analysis, CERT advisory processing, CVE and KEV awareness, mitigation validation, mitigation tracking, daily assessment analysis and detection engineering workflows

  • Scale expertise across teams by using Cymulate offensive testing, validation and security engineering knowledge embedded into agents and skills.

  • Coordinate action across tools by gathering context, correlating findings, launching validation, creating follow-up actions and supporting remediation across the broader security ecosystem

  • Close the loop between exposure and improvement by validating whether controls are working, whether mitigations are effective and whether security posture is improving over time

For more information about Cymulate Cowork, check out this blog.

Cymulate Claude Plugin: Cymulate Expertise Inside Claude

The Cymulate Claude Plugin enables customers to bring Cymulate capabilities and Cymulate AI Skills into their own Claude environment. It gives users a simple way to use Claude as an exposure validation assistant with guided, expert-informed workflows that understand cybersecurity tasks and Cymulate best practices.

Cymulate MCP Server: Open Access for AI-Native Security Workflows

The Cymulate MCP Server exposes Cymulate platform capabilities through the emerging Model Context Protocol standard, enabling MCP-compatible AI assistants and custom agents to securely interact with Cymulate using natural language. Customers can connect AI clients such as Claude, Cursor, Continue and other MCP-compatible environments to Cymulate to query platform data, orchestrate assessments, analyze exposures, validate mitigations and automate security operations.

For more information about the Cymulate Cluade Plugin and the Cymulate MCP Server, check out this blog.

About Cymulate

Cymulate is the leader in proactive, AI-powered security that continuously proves, prioritizes and adapts against real attacker behavior – before incidents occur. More than 1,000 enterprise security teams rely on Cymulate for autonomous threat validation and cyber defense engineering. Founded and led by experienced red teamers who know that testing alone does not deliver better security, Cymulate goes beyond threat validation to build threat- and exposure-informed cyber defenses. For more information, visit www.cymulate.com.

Media gallery

About The Author
Business Wire