DataBee®, a Comcast Company, today announced major advancements to its cyber risk management platform, including the next evolution of DataBee Continuous Controls Monitoring (CCM), new innovations in DataBee Frontier AI Defense, and expanded capabilities for DataBee User Access Review (UAR). Together, these advancements help organizations automate the manual work behind monitoring controls, assessing application exposures, and reviewing user access while reducing the cost, complexity, and effort required to manage cyber risk.
At the core of the announcement is a unique AI-native federated architecture that enables organizations to analyze cybersecurity data where it resides rather than first moving, normalizing, and consolidating it for analysis. While federated analytics has long been common in domains such as financial services and customer relationship management, cybersecurity data has historically been far more fragmented, heterogeneous, and difficult to analyze across systems.
Building on years of cybersecurity data expertise and a library of more than 340 connectors, DataBee has engineered new generative AI capabilities that can connect to structured, semi-structured, and unstructured security data, calculate key measurements, and retrieve only the information needed for analysis. The result is less implementation complexity, faster time-to-value, and quicker access to actionable cyber risk insights.
Reimagining Continuous Controls Monitoring
DataBee, a Comcast company, was included as a Sample Vendor in the Continuous Controls Monitoring category of the 2026 Gartner report, “Hype Cycle™ for Cyber-Risk Management, 2026”, 27 April 2026, Deepti Gopal, Pedro Pablo Perea de Duenas.
The next evolution of DataBee CCM applies new architecture to help organizations measure control effectiveness without a major data infrastructure project. AI-assisted connector creation accelerates onboarding, while flexible monitoring enables teams to define the controls, metrics, dashboards, and frameworks that matter most to their business. Users can then Ask DataBee questions about their security control posture to identify gaps, understand risks, receive recommendations for metrics to measure specific controls, and understand changes in control risks along with guidance on how to improve.
DataBee CCM provides explainable, rigorous, data-backed measurements and enables organizations to reuse control results across multiple regulatory, security, and business frameworks, creating a simpler path to continuous risk reporting and faster answers to cyber risk and compliance questions.
Beginning this quarter, select organizations can experience DataBee CCM through a complimentary two-week trial program. Organizations interested in early access can register now to secure a place in the program.
Frontier AI Defense: From Vulnerability Findings to Faster Remediation
Every vulnerability scanner can tell teams what is vulnerable. DataBee helps them understand what matters and who can fix it.
As AI-powered attacks accelerate exploitation, modern security teams are drowning in findings while struggling to answer three fundamental questions: How important is it? Who owns it? What should we do next? DataBee for Frontier AI Defense automatically connects vulnerabilities to the business-critical applications they affect, helping organizations quickly identify the responsible owners and accelerate remediation efforts.
DataBee’s proprietary, patent-pending entity resolution technology correlates and deduplicates information across scanners, CMDBs, application inventories, and operational systems to create a single record for each business application. By connecting vulnerabilities to the applications they impact and identifying the owners responsible for remediation, the solution helps organizations eliminate one of the most common causes of patching delays: determining who needs to take action. Combined with advanced analytics and business risk prioritization, this enables faster patching, smarter resource allocation, and measurable reductions in cyber risk.
Extending Identity Governance to Legacy Applications
User access reviews remain one of the most persistent challenges in identity governance. While many governance solutions focus on cloud and SaaS applications, organizations frequently rely on spreadsheets, manual processes, and ad hoc evidence collection to review access across mainframe, on-premises, and custom-built systems, leaving critical portions of the enterprise outside an automated governance process.
DataBee User Access Review closes this gap by identifying applications requiring review, establishing ownership, generating reviewer populations, and preserving the evidence and traceability needed for compliance and audit programs. By complementing existing identity governance investments, DataBee helps organizations extend governed access reviews across modern and legacy environments through a more complete and automated process.
Cybersecurity Awareness Month Webinar Series
To mark Cybersecurity Awareness Month, DataBee is hosting three educational webinars for CISOs, Cyber GRC leaders, and BISOs seeking to modernize their cyber risk management practices:
Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.
Hype Cycle is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.
Ridge Security Launches RidgeOne, a Self-Contained Appliance for AI Pentesting and Red Teaming
Posted in Commentary with tags Ridge Security on October 13, 2026 by itnerdRidge Security today announced RidgeOne, a self-contained solution that brings autonomous AI-powered penetration testing and agentic red teaming to mid-sized organizations. Combining Ridge Security’s RidgeGen® agentic security validation platform with an open-weight AI model running on NVIDIA DGX Spark, RidgeOne enables organizations to perform deep security testing within their own environment without sending sensitive testing data to an external AI provider or incurring ongoing AI token costs. Ridge Security is also joining the NVIDIA Inception Program, which provides startups with resources and support to help accelerate the development of innovative technologies.
For organizations with limited AI or security resources, accessing advanced security testing capabilities can be a challenge. RidgeOne is designed to make autonomous security testing easier to deploy and more accessible, giving organizations a way to use AI-driven offensive security without having to build their own AI infrastructure or maintain a separate AI environment.
RidgeOne is designed to provide several practical advantages:
The solution is built around a validated reference configuration based on the NVIDIA DGX Spark compact AI system, with 128 GB of unified memory shared between the AI model and RidgeGen. RidgeOne can be deployed in a VMware environment and brought online in five steps, without requiring customers to build separate AI infrastructure.
In testing, Ridge Security ran RidgeOne against OWASP Juice Shop and completed a full autonomous penetration test without operator involvement. The assessment produced 32 verified findings, including 19 critical and high-severity findings, over approximately 10 hours, without making any external AI calls. The system also connected separate findings into a multi-step attack path.
That ability to connect the dots is central to RidgeGen. Rather than stopping at individual vulnerabilities, the platform can reason across findings, test whether weaknesses can be chained together and provide evidence that security teams can use to prioritize fixes.
As attackers increasingly use AI to automate and accelerate their operations, organizations need ways to put the same technology to work on the defensive side. RidgeOne gives security teams a portable way to bring autonomous testing capabilities into their own environments, whether they are testing a corporate network, a restricted segment or a different environment altogether.
RidgeOne is now available for organizations looking to deploy private, autonomous security testing within their own environments.
Leave a comment »