Assured Inc. announced on the 10th that it will begin offering a new service, the “AI Comprehensive Cybersecurity Risk Assessment,” powered by Anthropic’s latest AI model, “Claude Mythos 5.2.” As cyberattacks grow faster and more sophisticated, the service aims to enable companies to conduct cross-cutting inspections and evaluations of the security of their entire IT systems.
The service is a diagnostic offering in which Assured’s expert consultants use Claude Mythos to integrate and analyze the infrastructure configurations and permission settings of major cloud environments (AWS, Microsoft Azure, Google Cloud), data detected by the company’s vulnerability management cloud “yamory,” and application source code. Companies that do not currently use yamory can also undergo the assessment.
Until now, cloud configuration information, authentication and permission information, and vulnerability data have largely been inspected and managed separately. The new service uses Claude Mythos to analyze such information in an integrated manner, conducting a three-dimensional examination of scattered configuration deficiencies and potential attack paths. It is said to make visible the compound risks that arise when multiple factors chain together—risks that single tools tend to overlook.
The analysis is conducted from an attacker’s perspective. By combining multifaceted approaches—exposure analysis, network and resource configuration analysis, software vulnerability analysis, authentication and permission analysis, misconfiguration analysis, attack path analysis, and application code analysis—the service evaluates risk not merely on theoretical severity but on the basis of paths that could actually be targeted in an attack.
Rather than delivering AI analysis results as-is, Assured has established a framework in which its expert consultants rigorously review the findings in light of actual environments and operational conditions. Ultimately, the company provides customers with a comprehensive report that includes an assessment of the robustness of the entire IT system as well as the prioritization of risks that truly need to be addressed and concrete remediation guidance.
The company plans to continuously advance its evaluation methodologies through this service, and says it will gradually expand the service—including extending its scope to on-premises environments—so that it can accommodate the diverse system environments of enterprises.
Anthropic’s Claude Mythos 5.2 is positioned as a model with capabilities specialized for the cybersecurity field. According to the company, it has higher vulnerability detection accuracy than existing major models and is also suited for uses such as monitoring codebase updates to detect potential backdoors. Assured’s assessment service incorporates these characteristics into companies’ practical operations.
As corporate cloud usage expands, there is a growing number of cases in which individual risk factors—such as configuration deficiencies, excessive permission grants, and software vulnerabilities—become intricately intertwined. Conventional vulnerability assessments and configuration audits tend to be limited to evaluating each factor individually, and have been seen as unable to fully capture cases in which multiple weaknesses chain together to form a real-world attack path. Assured aims to fill this gap by combining AI-driven cross-cutting analysis with human review.
In the cybersecurity assessment market, AI-powered analysis is becoming increasingly sophisticated. While the adoption of generative AI complicates corporate system configurations, defenders are also being pressed to enhance their analytical capabilities through AI, and the competitive axis of assessment services is shifting toward detection accuracy and fit with actual environments. Assured’s clear positioning of review by consultants responds to the stance of companies that do not simply trust AI output as-is.
For corporate security personnel, the burden of inspecting cloud configurations and managing vulnerabilities with separate tools has been a challenge. The new service integrates these tasks and presents remediation priorities, thereby providing decision-making material for advancing countermeasures with limited staff. If expansion to on-premises environments is realized, the scope of application will also broaden for companies with hybrid configurations.
Assured has developed its vulnerability management cloud “yamory” as a flagship product. This assessment service is positioned to link detection data accumulated through its existing products to AI analysis, and can be read as a move to expand the company’s business domain into assessment and consulting.
——————————————————-
Click Here For The Original Source.
