Check Point Software launches agentic exposure validation to counter frontier AI models now capable of autonomous exploitation

Check Point Software Technologies, a pioneer and global leader of cyber security solutions today launched Agentic Exposure Validation (AEV) for Exposure Management, to put defenders on equal footing with AI-driven attackers. As frontier AI models like Anthropic's Mythos and OpenAI's GPT-5.5 gain the ability to autonomously find thousands of exploitable vulnerabilities at scale, the question for boards and CISOs is no longer "are we patched?" but "what can attackers actually exploit right now? and how do we find it before they do?" AEV is the answer.
 
"The era of autonomous, AI-driven exploitation is here. Frontier AI models are attacking critical vulnerabilities at scale, without human steering," said Yochai Corem, General Manager of Exposure Management at Check Point. "Security teams are already inundated and cannot effectively address that emerging threat. Agentic Exposure Validation is our answer: AI agents that reason like attackers reviewing your organization digital surface from the outside with our unique threat intelligence context and prove what is actually exploitable and provides security teams the evidence and the remediation to act smartly and effectively before attackers do."
 
Agentic Exposure Validation (AEV) uses AI agents that reason like attackers across the organization's specific environment, correlating exposure data, asset context, live exploit research, threat intelligence, and protection coverage to determine whether an exposure is truly exploitable. Rather than relying on static severity scores, AEV follows a safe proving loop: it analyzes the relevant asset or CVE, enriches findings with live Check Point threat intelligence, checks whether existing controls already block the path, and builds a targeted validation that mirrors attacker reasoning without disruptive techniques. It then either proves the exposure with direct evidence, pivots to a new attack path when blocked, or discards the threat altogether. AEV is a critical validation capability within Continuous Threat Exposure Management (CTEM) programs, helping organizations move from discovery and prioritization into confident, evidence-based exposure reduction at AI scale.
 
Early customer engagements have already demonstrated this pattern, and AEV was able to create novel exploit for dozens of vulnerabilities that had no known exploit.