Blog
Company
Cogent Expands Its AI Cyber Defense Factory with Specular Acquisition
Cogent has acquired Specular, a Google-backed AI security platform that sees the enterprise the way an attacker does, strengthening its ability to find, validate, and fix vulnerabilities at machine speed.
5 min read
Frontier AI is fundamentally changing cybersecurity. AI agents can increasingly discover vulnerabilities, identify attack paths, and develop exploits at machine speed. Defending against these threats requires a fundamentally different operating model: an AI Cyber Defense Factory, where AI agents continuously find, validate, and fix vulnerabilities before attackers can exploit them.
Today, we're taking another important step toward that vision with the acquisition of Specular, a Google-backed AI security company that helps enterprises see their environments the way sophisticated attackers do. Specular founder Peyton Smith and members of his team are joining Cogent, bringing technology and expertise that strengthen our platform for autonomous cyber defense.
The acquisition builds on a series of recent milestones, including the launch of Attack Path Analysis, the introduction of our Cyber Defense Factory, and our VR-1.1 model placing first on LiveCVEBench for repairing real-world vulnerabilities.
Why the Attacker's Perspective Matters
When PHP2Shell was disclosed on October 21, the average Fortune 500 company in our research had 2,266 affected assets. Cogent narrowed that list to just 16 that warranted immediate attention based on runtime exposure, internet reachability, and business criticality.
Getting to that level of precision requires combining what scanners, cloud and endpoint products, and attack surface management tools each know about an asset. In most enterprises, that information lives in separate tools run by separate teams. Analysts are left to connect the dots manually, while attackers simply look for any path in.
As frontier AI accelerates the speed of attacks, this gap becomes increasingly difficult to manage. Enterprises can't afford to spend days piecing together information to understand their exposure while attackers operate in minutes.
Specular strengthens a critical part of the Cyber Defense Factory: understanding how attackers see and interact with an enterprise from the outside.
Its specialized AI agents continuously discover and index internet-facing assets, identify vulnerabilities, and test how weaknesses could be exploited. This provides Cogent a native, attacker-informed view of the external attack surface, complementing the internal context and attack path analysis already available in our platform.
Strengthening the Cyber Defense Factory
The real value of Specular comes from connecting its capabilities to the rest of Cogent.
Today, Cogent brings together vulnerability data, asset context, exploitability analysis, and remediation into a unified platform. Our Attack Path Analysis traces how an attacker could move from an initial foothold toward an organization's most critical systems and data.
Specular makes that picture more complete by strengthening our understanding of the internet-facing assets where many of those paths begin.
As we integrate Specular's technology, its context and findings will flow through the broader Cogent platform:
Discover: Continuously identify externally exposed assets and vulnerabilities from an attacker's perspective.
Validate and prioritize: Determine which weaknesses are exploitable, connect them to internal attack paths and business context, and focus on the risks that matter most.
Remediate: Route vulnerabilities to the right owners or execute remediation through AI agents, with verification that the underlying risk has been addressed.
Historically, these steps have required separate tools, teams, and manual handoffs. The Cyber Defense Factory brings them together into one continuous system.
The goal isn't to generate more findings for security teams to investigate. It's to continuously identify how an enterprise could be compromised and automatically take action to prevent it.
Welcoming Peyton Smith
I'm excited to welcome Peyton Smith to Cogent as our Head of Offensive Security, along with members of the Specular team.
Peyton brings deep experience across both offensive and defensive security. Prior to starting Specular, he spent 5 years at CrowdStrike Services responding to sophisticated nation-state and e-crime intrusions and leading red team engagements against Fortune 500 enterprises.
His team demonstrated how attackers could compromise critical financial infrastructure, access sensitive healthcare data, and penetrate complex enterprise environments. He's seen firsthand how sophisticated adversaries operate, and what it takes to stop them.
Peyton founded Specular on the principle that defenders need to understand their environments the way attackers do. That philosophy aligns directly with what we're building at Cogent.
Beyond the technology, we're gaining a team with deep expertise in understanding how enterprises are attacked and translating that knowledge into better defenses. We're fortunate to have them joining us.
What This Means for Customers
For Cogent customers, Specular will strengthen the platform's ability to discover external exposures, validate real-world attack paths, and connect those findings directly to prioritization and remediation.
For Specular customers, the acquisition brings access to a broader platform that can take validated exposures and carry them through to a verified fix. Existing customers will continue to receive support and access to the Specular product throughout the integration, with additional capabilities becoming available over time.
Importantly, Cogent remains committed to an open ecosystem. Customers can continue using their existing scanners, CNAPPs, endpoint tools, attack surface management products, ITSM systems, and remediation infrastructure.
A Cyber Defense Factory needs to work across the tools and environments enterprises already have, not require them to replace everything they use.
Building for the Frontier AI Era
The pace of cyberattacks is accelerating, and the traditional model of disconnected security tools and manual workflows cannot keep up indefinitely.
The future of cyber defense won't be defined by who can generate the most alerts or discover the most vulnerabilities. It will be defined by who can identify and eliminate risk before attackers exploit it.
That's the Cyber Defense Factory we're building at Cogent. With Specular and Peyton's team joining us, we're another important step closer.
