Opus security unveils advanced AI-driven vulnerability engine

Opus Security has introduced its Advanced Multi-Layered Prioritization Engine, aimed at transforming vulnerability management within organisations.

This new technology deploys artificial intelligence (AI), contextual data, and automated decision-making to streamline vulnerability remediation processes.

Traditional vulnerability management often leaves security teams overwhelmed by numerous alerts from various tools, leading to difficulties in prioritising which vulnerabilities to address first. The lack of adequate information and context further complicates this process, often resulting in wasted time and increased frustration among developers. Opus Security's new engine seeks to address these challenges through a multi-layered approach integrating intelligence, contextual analysis, and risk mitigation.

According to the company, the engine features traditional vulnerability severity scoring combined with dynamic exploitability analysis and an automated decision-making process. This aims to provide a robust method for ranking vulnerabilities, thereby allowing security teams to prioritise and address the most critical issues first.

A core feature of the engine is its AI-Based Vulnerability Intelligence Layer, which extends beyond conventional severity assessments. Leveraging over 700 real-time threat intelligence feeds, the engine can offer a deep and nuanced understanding of each vulnerability's risk. Sources for this intelligence include dark web forums, social media, open-source tools, exploit databases, and active threat campaigns. This comprehensive approach allows organisations to be informed about vulnerabilities and their potential exploitation more accurately.

The five-layered framework commences with a Base Severity Assessment, aggregating scores from multiple security tools and databases to ensure no critical vulnerabilities are missed. Following this, the AI-Based Vulnerability Intelligence layer identifies high-risk issues based on their exploitation likelihood. The Contextual Impact layer prioritises vulnerabilities according to their relevance to specific business functions, focusing on protecting critical systems that handle sensitive data.

Unique to this engine is its ability to perform S-SV-C (Stakeholders, Severity, Vulnerability, Context) decision-making, categorising vulnerabilities into specific response actions based on the affected environment's severity, exploitability, and criticality. The final layer, Risk Customization, allows organisations to tailor prioritisation based on their specific risk appetite and operational needs.

The product also introduces Effortless Data Querying, enabling users to interact with the platform through natural language. This feature aids in refining vulnerability lists quickly based on specific concerns, allowing for precise, data-driven decisions powered by advanced AI insights.

Opus Security states that the multi-layered approach of the engine ensures unprecedented precision in risk management, integrating real-time intelligence with detailed contextual analysis. This integration supports S-SV-C decision-making, enabling security teams to focus on the vulnerabilities that genuinely matter and reducing the likelihood of neglecting critical issues.

By aligning security decisions with business priorities, Opus aims to drive context-aware decision-making that protects critical assets and aligns directly with strategic goals.

Speaking on the new engine, Meny Har, CEO of Opus Security, noted, "Opus' new Advanced Multi-Layered Prioritization Engine is a game-changer in vulnerability remediation, simplifying, streamlining, and optimising the process considerably. The engine's ability to prioritise the vulnerabilities that pose the greatest risk reduces overall security costs and helps security and developer teams avoid unnecessary remediation of low-risk issues."

"Minimising friction between development and security teams, driving smoother collaboration, and ensuring that security measures do not impede the development process means that all teams can focus on what matters and fix what counts."