Armory Defense launches agentic AI simulations to test exploitable risk

Armory Defense said its new agentic-AI simulations are designed to validate real-world exposures, using autonomous agents to test an organization’s external attack surface and produce proof of impact.

Armory Defense launches agentic AI simulations to test exploitable risk

Armory Defense said on July 31, 2026, that it launched Offensive Agentic-AI Simulations, a new capability in its continuous adversarial exposure validation platform.

The company said the system uses autonomous AI agents to continuously attack an organization’s external attack surface to identify, validate and prove which exposures can be exploited before attackers do.

Armory Defense said the product is designed to separate theoretical risk from exposures that can be turned into working attacks. The company said cybercriminals are already using AI to find, chain and exploit weaknesses at machine speed, which can shorten the time between disclosure and exploitation.

In its release, the company cited a critical VPN vulnerability with a CVSS score of 9.8. Armory Defense said the flaw could be weaponized in about 40 minutes using an AI-guided workflow, compared with weeks in prior approaches.

The company said the simulations are tailored to each organization’s infrastructure, business processes and threat landscape. It said the agents replicate attacker behavior against specific attack paths and high-value assets, then provide a safe, controlled proof of impact for each exposure they exploit.

Armory Defense organized the simulations into what it calls Hackbooks, covering login and authentication abuse, API exploitation, database attacks and validation of known CVEs. The company said the platform is fully agentless and begins validating immediately without disrupting operations.

The release said the system is intended to reduce alert fatigue by emphasizing validated, exploitable risk rather than theoretical alerts. It said the platform combines agentic-AI simulations, external attack surface management, exposure intelligence and third-party validation to give security teams a continuous view of where they can actually be breached.

CEO and Co-Founder Alon Aharon said, “We don’t find risk, we prove it.” He said the agents safely simulate real attacks, reveal attacker paths and provide evidence of exploitable risk.

Armory Defense described itself as an Israeli cybersecurity company founded in 2023 that operates through Israel and Mexico and serves customers globally.

Sources

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

▶ View the Web Story
A visual, tap-through version of this report.