DataBee®, a Comcast Company, today announced major advancements to its cyber risk management platform, including the next evolution of DataBee Continuous Controls Monitoring (CCM), new innovations in DataBee Frontier AI Defense, and expanded capabilities for DataBee User Access Review (UAR). Together, these advancements help organizations automate the manual work behind monitoring controls, assessing application exposures, and reviewing user access while reducing the cost, complexity, and effort required to manage cyber risk.
At the core of the announcement is a unique AI-native federated architecture that enables organizations to analyze cybersecurity data where it resides rather than first moving, normalizing, and consolidating it for analysis. While federated analytics has long been common in domains such as financial services and customer relationship management, cybersecurity data has historically been far more fragmented, heterogeneous, and difficult to analyze across systems.
Building on years of cybersecurity data expertise and a library of more than 340 connectors, DataBee has engineered new generative AI capabilities that can connect to structured, semi-structured, and unstructured security data, calculate key measurements, and retrieve only the information needed for analysis. The result is less implementation complexity, faster time-to-value, and quicker access to actionable cyber risk insights.
Reimagining Continuous Controls Monitoring
DataBee, a Comcast company, was included as a Sample Vendor in the Continuous Controls Monitoring category of the 2026 Gartner report, “Hype Cycle™ for Cyber-Risk Management, 2026”, 27 April 2026, Deepti Gopal, Pedro Pablo Perea de Duenas.
The next evolution of DataBee CCM applies new architecture to help organizations measure control effectiveness without a major data infrastructure project. AI-assisted connector creation accelerates onboarding, while flexible monitoring enables teams to define the controls, metrics, dashboards, and frameworks that matter most to their business. Users can then Ask DataBee questions about their security control posture to identify gaps, understand risks, receive recommendations for metrics to measure specific controls, and understand changes in control risks along with guidance on how to improve.
DataBee CCM provides explainable, rigorous, data-backed measurements and enables organizations to reuse control results across multiple regulatory, security, and business frameworks, creating a simpler path to continuous risk reporting and faster answers to cyber risk and compliance questions.
Beginning this quarter, select organizations can experience DataBee CCM through a complimentary two-week trial program. Organizations interested in early access can register now to secure a place in the program.
Frontier AI Defense: From Vulnerability Findings to Faster Remediation
Every vulnerability scanner can tell teams what is vulnerable. DataBee helps them understand what matters and who can fix it.
As AI-powered attacks accelerate exploitation, modern security teams are drowning in findings while struggling to answer three fundamental questions: How important is it? Who owns it? What should we do next? DataBee for Frontier AI Defense automatically connects vulnerabilities to the business-critical applications they affect, helping organizations quickly identify the responsible owners and accelerate remediation efforts.
DataBee’s proprietary, patent-pending entity resolution technology correlates and deduplicates information across scanners, CMDBs, application inventories, and operational systems to create a single record for each business application. By connecting vulnerabilities to the applications they impact and identifying the owners responsible for remediation, the solution helps organizations eliminate one of the most common causes of patching delays: determining who needs to take action. Combined with advanced analytics and business risk prioritization, this enables faster patching, smarter resource allocation, and measurable reductions in cyber risk.
Extending Identity Governance to Legacy Applications
User access reviews remain one of the most persistent challenges in identity governance. While many governance solutions focus on cloud and SaaS applications, organizations frequently rely on spreadsheets, manual processes, and ad hoc evidence collection to review access across mainframe, on-premises, and custom-built systems, leaving critical portions of the enterprise outside an automated governance process.
DataBee User Access Review closes this gap by identifying applications requiring review, establishing ownership, generating reviewer populations, and preserving the evidence and traceability needed for compliance and audit programs. By complementing existing identity governance investments, DataBee helps organizations extend governed access reviews across modern and legacy environments through a more complete and automated process.
Cybersecurity Awareness Month Webinar Series
To mark Cybersecurity Awareness Month, DataBee is hosting three educational webinars for CISOs, Cyber GRC leaders, and BISOs seeking to modernize their cyber risk management practices:
Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.
Hype Cycle is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.
October Patch Tuesday: The real problem isn’t the number of vulnerabilities
Posted in Commentary with tags Fortra on October 13, 2026 by itnerd1,413 vulnerabilities in October can make patching feel unmanageable, but Tyler Reguly argues that volume alone is a distraction. With 26 2026 Microsoft CVEs appearing in CISA’s KEV catalog, security leaders should focus on exploitable risk, and ask whether their teams have the clarity, capacity and support to act.
By Tyler Reguly, Associate Director, Security R&D, Fortra
Recently, I’ve argued that numbers are meaningless. This month’s number, 1413, is no different. There are, however, numbers that hold meaning. 26, for example, is how many 2026 Microsoft CVEs have shown up in the CISA KEV. Last year, that number was 30, and the year before was 32. That means less than 1% of vulnerabilities patched by Microsoft this year are known to be exploited. That’s an important number… but 1413 definitely isn’t.
I’ve talked to some people recently who’ve commented on the number of vulnerabilities announced this year, and I’ve spent a lot of time trying to think of how to explain it to them.
In the US, there are around 5000 movies available in the Netflix catalog depending on which source you look at. At any given moment, you care about one or two of those movies – the one you want to watch and, maybe, the one you want to watch next. The rest are just background noise. You prioritize those movies based on what you want to see, which is decided by your preferences. You don’t need to care about every vulnerability, just the one you are going to patch next, which you prioritize based on factors that matter to your organization. The rest of the vulnerabilities… background noise, no different than that random 1970’s creature feature that keeps showing up on your recommendations, even though you’ll never watch it.
“Pop Quiz, Hotshot” has always been one of my favorite quotes and today I’m directing that statement toward all the CISOs out there with teams actively working on Patch Tuesday. I want each of you to ask yourselves these 5 questions, to see if you really understand those teams work and if you are setting them up for success.
The answers to these questions may open your eyes to the needs of your team and help make them a happier, more productive group of individuals.
Leave a comment »