Investing in AI-Powered Vulnerability Remediation
New York-based AI cybersecurity startup Vicarius has raised $30 million in a Series B funding round, bringing its total funding to $56 million. The round, led by Bright Pixel Capital, also saw participation from AllegisCyber Capital, AlleyCorp, and Strait. This new capital will bolster Vicarius's automated vulnerability management capabilities, now increasingly driven by AI technology.
Vicarius aims to revolutionize the vulnerability management market with its vRx platform, which automates the discovery, prioritization, and remediation of vulnerabilities using AI. The company serves over 400 customers, including Fortune 500 giants like PepsiCo, Hewlett Packard Enterprise, and Equinix. Vicarius also fosters an active community, vSociety, where researchers contribute vulnerability management scripts.
In the summer of 2023, Vicarius launched its vulnGPT tool, harnessing generative AI to assist individuals and organizations in identifying and fixing software vulnerabilities. Since its release, vulnGPT has seen significant enhancements.
Advancements in Security Automation with vuln_GPT
Vuln_GPT utilizes large language model (LLM) technology tailored for vulnerability management. Users can generate remediation scripts by simply entering natural language queries, thanks to the fine-tuning of the LLM on Vicarius’s extensive knowledge base.
CEO Michael Assraf noted that the tool has received ongoing updates, particularly in improving the accuracy of its generated scripts. A new validation step ensures that only non-malicious scripts are incorporated into Vicarius’s commercial offerings.
The scope of vuln_GPT has broadened from its initial focus on Microsoft Windows systems to now also encompassing Linux and macOS vulnerabilities. Additionally, the tool is evolving to generate scripts for vulnerability detection, extending its utility for users.
Future Developments: AI-Driven Compliance
Looking ahead to 2024, Vicarius plans to leverage its new funding to enhance its market presence and expand its service offerings. Upcoming is the x_comply AI-driven compliance and benchmark tool.
“We are developing a cohesive language system designed to consolidate various streams of compliance documents and scripts into streamlined processes,” Assraf stated. “Our goal is to help customers easily identify and rectify compliance discrepancies.”