SolarWinds Avior pairs IT automation with human approval and audit trails - Help Net Security
SolarWinds has announced the launch of Avior, a standalone, goal-oriented agentic AI system purpose-built for mission-critical IT environments.
Anchored in AI by Design, the responsible-AI framework SolarWinds applies across its portfolio, Avior safeguards customer environments while keeping humans in the loop through granular audit trails, goal tracking, automated rollback support, data masking, and strict least-privilege tool access.
At launch, Chainguard engineers operate Harness on behalf of customers by running it against the trusted open source artifacts Chainguard already distributes and delivers patched builds via Chainguard Repository, and by running it against a customer’s source code and delivering an engineer-reviewed report of validated findings with severity, impact, reproduction steps, and recommended remediation.
Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic’s Claude Mythos 5.1 to find and fix exploitable vulnerabilities in an organization’s application code.
Instead of pulling a report together by hand, teams can ask their AI tool directly and get a live answer grounded in current data: how ready the organization is for its SOC 2 audit right now, which controls are failing or still need evidence before the audit, what is blocking the current audit, which policies have not yet been signed and by whom, or which automated tests are currently failing.
NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration connector that extends the platform’s governed access to the AI tools teams already use.
Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools directly to their compliance program.
With Scytale MCP, tools such as Claude and ChatGPT can query live compliance data and complete routine work through plain language instead of screen-by-screen navigation.
Scytale MCP uses that standard to make compliance data and workflows available to any AI tool a customer connects, with the same rigor and access controls as the platform itself.
Threat actors are commercializing AI-enhanced attack tools and exploiting vulnerabilities faster than human-speed defenses can respond.
Rapid7 Intelligence powers a suite of open-source tools used by security researchers, pen testers, and threat hunters worldwide.
What happened
Anchored in AI by Design, the responsible-AI framework SolarWinds applies across its portfolio, Avior safeguards customer environments while keeping humans in the loop through granular audit trails, goal tracking, automated rollback support, data masking, and strict least-privilege tool access.
At launch, Chainguard engineers operate Harness on behalf of customers by running it against the trusted open source artifacts Chainguard already distributes and delivers patched builds via Chainguard Repository, and by running it against a customer’s source code and delivering an engineer-reviewed report of validated findings with severity, impact, reproduction steps, and recommended remediation.
What changed
Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic’s Claude Mythos 5.1 to find and fix exploitable vulnerabilities in an organization’s application code.
Instead of pulling a report together by hand, teams can ask their AI tool directly and get a live answer grounded in current data: how ready the organization is for its SOC 2 audit right now, which controls are failing or still need evidence before the audit, what is blocking the current audit, which policies have not yet been signed and by whom, or which automated tests are currently failing.
Who is affected
NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration connector that extends the platform’s governed access to the AI tools teams already use.
Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools directly to their compliance program.
Why it matters
With Scytale MCP, tools such as Claude and ChatGPT can query live compliance data and complete routine work through plain language instead of screen-by-screen navigation.
Scytale MCP uses that standard to make compliance data and workflows available to any AI tool a customer connects, with the same rigor and access controls as the platform itself.
Technical details
Threat actors are commercializing AI-enhanced attack tools and exploiting vulnerabilities faster than human-speed defenses can respond.
Rapid7 Intelligence powers a suite of open-source tools used by security researchers, pen testers, and threat hunters worldwide.
Harness builds an application from an organization’s source code in an isolated microVM, instructs a frontier model to hunt for exploitable vulnerabilities in a live, running instance, and reproduces every finding before delivering a tailored, staff-reviewed fix.
Response
MCP, an open standard introduced by Anthropic in late 2024 for connecting AI applications to external data and tools, has since been adopted across major AI clients.
Katana AI gives technicians a summary and recommended next steps in one view, no more searching or pulling daily reports to get the data you need instantly,” said Randy Hyder , MSP Manager, Range MSP.
What security teams should do
Live compliance queries, available now: Scytale MCP exposes core compliance objects as read-only tools, including frameworks, audits, controls, monitoring, policies, risks, tasks, and vendors.
Instead, teams should rank their issues around how serious they are, how much impact they would have on the business if an exploit was released, and how much impact a deployment would have if something did go wrong.
Attribution
Help Net Security: SolarWinds has announced the launch of Avior, a standalone, goal-oriented agentic AI system purpose-built for mission-critical IT environments.
Help Net Security: Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic’s Claude Mythos 5.1 to find and fix exploitable vulnerabilities in an organization’s application code.
Help Net Security: Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools directly to their compliance program.
Help Net Security: GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts.
What to watch next
Watch for updated vendor guidance and fixed-version details.