Optiv has added this service to its existing vulnerability management practices, and it is connected to the Optiv Agentic Security Operations hosting service.
Lewood, Kansas, November 12, 2026 / PRNewswire / -- The world's largest pure cybersecurity company, Optiv, today announced the expansion of its threat exposure management services and the integration of these services into its existing enterprise vulnerability management practices. Customers can now manage exposure through a unified managed project in both cloud and on-premises environments, and confirm the results of repairs through retesting.
The company stated that the time between the public disclosure of a vulnerability and its first exploitation has been reduced to just a few days, and in some cases, even to just a few hours. At the same time, attackers are increasingly using AI to identify exposed systems within minutes and test ways to exploit them. Most organizations still take several weeks to make repairs, typically working according to a backlog list sorted by severity. Optiv claims that its threat exposure management service replaces this sorting method with continuous testing, showing which exposed points attackers can access and exploit in the customer environment, and prioritizes the fixing of these issues.
The threat exposure management service of Optiv includes:
- Expert-led operation:The results are run and reviewed by the staff members identified by Optiv. The client team receives a prioritized list of tasks, not the platform's original output.
- Risk-based priority sorting:Evaluate the exploitability of each exposure point, existing control measures, asset value, and business impact.
- Optiv Self-built AI Proxy:The proxy developed for Optiv Agentic Security Operations can associate findings from scanners, cloud situational awareness tools, and verification tests, and draft repair steps for review by practitioners.
- Verified fix:Re-test the repair results to confirm that the vulnerabilities have been fixed, and report the results to the security management team.
- Linked security operations:This service can operate in conjunction with the existing Optiv vulnerability management project and connect to the Optiv Agentic Security Operations launched in August. The latter will integrate management into the same hosting service as detection and response, and align with the overall strategy of Optiv for "consulting, deployment, and operations."
Optiv, the Senior Vice President of Services, stated: "The most dangerous period is the time between when the exposure is discovered and when the fix is completed. Since we operate both verification and detection at the same time, we will not let this period go unmonitored."
She said, "The information we obtain while testing the attack paths is converted into detection rules within SIEM on the same day. Therefore, even though the repair work is still in progress, customers can still be protected."
Optiv indicates that in cloud environments, attackers often link together seemingly minor exposed vulnerabilities, such as internet-facing workloads, identities with excessive permissions, and accessible data storage, in order to gain access to sensitive data. Scoring each identified vulnerability individually can overlook such combined risks. Optiv states that this approach maps cloud exposed vulnerabilities to potential attack paths, identifies remediation measures that can cut off each of these paths, and confirms that the paths have been closed after the repairs are made.
Optiv Product Director Ben Spencer stated: “AI makes it much faster for attackers to identify exposed points and link them together, whereas most security projects are not organized to respond at such a pace.”
He stated, "Vulnerability management, cloud security posture management, and penetration testing are typically undertaken by different teams at varying paces. By integrating these processes into a single project, we can view the environment from the attacker's perspective and provide verifiable remediation plans to those who are truly at risk."
Optiv To stay informed about the company's latest news and developments, please visit: https :// www.optiv.com / newsroom.
About Optiv Security:Secure greatness .®
Optiv indicates that the company is the largest pure cybersecurity firm in the world. With a wide range of technical partnerships and profound technical expertise, Optiv empowers over 6,000 customers with security for the AI era. From financial services, healthcare to government, energy, and retail sectors, various organizations trust Optiv to provide consulting, deployment, and operation of cybersecurity projects in order to reduce risks and achieve tangible results. For more information, please visit optiv.com.
