Cogent Security joins Fortune Cyber 60 for second year

Cogent Security, an applied AI cybersecurity firm, says its research on the PHP2Shell vulnerability exposed significant gaps in enterprise vulnerability response. disclosed on 21 October, the two critical flaws in PHP had persisted for more than a decade. Cogent asserts that AI-assisted research produced working exploits in around a week, with attacks beginning before a patch was available, and Cloudflare logged millions of exploitation attempts on that day.

In Cogent’s view, the gap between attacker speed and enterprise response remains a core problem the company aims to close. Cogent was named to the Fortune Cyber 60 for a second consecutive year, a list that recognises venture-backed cybersecurity startups with strong growth and market impact, as validated by Fortune, Lightspeed Venture Partners and AWS.

Cogent describes its “Cyber Defense Factory” operating model, in which AI agents perform routine remediation work across inventory, vulnerability matching, and prioritised fixes, while human policy makers set the rules. The company’s first product targets autonomous vulnerability management. Findings flow from customers’ existing scanners and tools, with agents cross-referencing vulnerabilities against a live asset inventory to surface exposure before traditional scanners.

Cogent claims its Zero Day Response mapped vulnerable assets within an average of five minutes, reducing 2,266 affected assets in the average Fortune 500 environment to 16 that had PHP loaded at runtime, faced the internet, and supported critical business functions. The VR-1 model and its Context Engine are cited as differentiators, pairing a domain-specific AI with contextual data to guide safe patching decisions. Cogent notes that customers start with assistive agent roles and progress toward progressive autonomy as results gain trust.