Skyhawk Security launches AI-powered continuous security validation

Cloud detection and response company Skyhawk Security has launched new agentic artificial intelligence capabilities for its AI-based Red Team, enabling continuous security control validation. Announced ahead of the AWS re:Invent 2025 conference, this update moves beyond traditional breach-and-attack simulation by actively verifying if existing detection and enforcement tools can stop or detect real attack paths in live production environments, as reported by Silicon Angle.

The new agentic AI in Skyhawk's Red Team formally validates third-party security controls against attack scenarios in live cloud environments. It connects to existing customer security controls to determine if prevention technologies would block specific activities and if detection tools would generate appropriate alerts. When coverage is incomplete, the system prescribes remediation steps and drafts detection updates. This approach extends breach and attack simulation beyond simulation to an evidence-based assessment of attack feasibility in production architectures. The platform integrates with SIEM tools like Splunk and IBM, cloud monitoring tools such as Amazon CloudWatch, and enforcement controls including web application firewalls and endpoint security from vendors like CrowdStrike.

This development offers an environment-aware view of security stack coverage, addressing the dynamic and often siloed nature of cloud environments. By providing a single view of deployed and effective security measures, Skyhawk aims to improve visibility for customers.

Source: Silicon Angle