Unveiled at Black Hat USA 2026, the introduction of Cymulate Cowork, the Cymulate Claude Plugin, and the Model Context Protocol (MCP) Server extends Vero AI across autonomous workflows, customer AI environments, and open AI ecosystems.
At Black Hat USA 2026, exposure validation and cyber defense engineering leader Cymulate announced a major expansion of its AI innovation strategy. The rollout introduces Cymulate Cowork, the Cymulate Claude Plugin, and the Cymulate Model Context Protocol (MCP) Server, taking the evolution of Cymulate Vero AI and agentic cyber defense engineering to the next level.
Powered by Vero AI, the Cymulate Platform integrates and executes exposure validation across security workflows through intelligent, expert-guided automation.

As an agentic SaaS extension to the Cymulate Platform, Cymulate Cowork allows users to build recurring, scheduled workflows using plain-language prompts. By assembling the right agents, skills, and integrations, Cowork gathers context, analyzes risk, executes assessments, and drives remediation across the security ecosystem.
Key capabilities of Cymulate Cowork include:
- Plain-Language Command: Instruct Cowork to validate exposures to emerging threats, test mitigation effectiveness, or generate executive risk summaries.
- Automated Routines: Run on-demand or scheduled workflows for CERT advisory processing, CVE and Known Exploited Vulnerabilities (KEV) awareness, and detection engineering.
- Closed-Loop Verification: Validate whether security controls are holding up and whether posture is genuinely improving over time.
“Security teams are asked to move faster than ever, but the work of cyber defense is still too manual, too fragmented and too dependent on scarce expertise,” said Avihai Ben-Yossef, CTO and Co-founder of Cymulate. “With Cymulate Cowork, the Cymulate Claude Plugin and our MCP server, we are giving customers the flexibility to apply AI in the way that best fits their environment.”
To fit seamlessly into diverse security architectures, Cymulate is expanding how users interact with its platform:
- Cymulate Claude Plugin: Brings Cymulate capabilities and security engineering skills directly into customer Claude environments, turning Claude into an expert-guided exposure validation assistant.
- Cymulate MCP Server: Leverages the emerging Model Context Protocol standard to let MCP-compatible AI assistants, including Cursor, Continue, and Claude, securely interact with Cymulate data, orchestrate assessments, and automate security operations via natural language.


























