Leveraging Agentic AI for Vulnerability Remediation

About this session

We have more than enough tools to find cybersecurity vulnerabilities; we need help fixing all the things we find.And security teams don't fix vulnerabilities, we find vulnerabilities. We've automated how to find security risks, but still manually fix them. And it's the IT teams that remediate findings. We need to empower IT with tools an automation to help them dig out of the thousands of vulnerabilities we pass them each month. There are automated workflows and Agentic tools that mimic all the steps humans take to remediate; define problem, prioritize, determine root cause, develop the remediation, test the fix to make sure it doesn't impact other components or affect performance, and create ticket to put into change control process. This session shows how, by using a set of tools and Agentic AI, we can help IT keep up with the deluge of vulnerabilities they are asked to fix each week by automating the most time consuming steps to get tickets closed. We understand historically we were worried about automating system changes because it might make a mistake that disrupt the infrastructure. But our fears are from historic platforms or scripts that had no context. With Agentic AI, we can go through all the steps a human engineer would, with greater speed and accuracy, and provide all the evidence of completeness in a configuration change ticket before being sign-off by a human or other approval process. We have to become comfortable automating remediation or we will continue to pile up tickets for vulnerabilities that will never get fixed.