What’s New in Cogent: October 2026

October’s updates give security teams more control over how they organize remediation, share access, and repeat recurring work. Remediation Campaigns bring related vulnerability work into one view for more effective management, while asset-scoped access lets administrators define which assets each team can see and act on. Teams can also adjust Work Items in Action Queue for more fine-grained control, and create reusable skills and automations through General Agent to cut out repeat operational overhead.

Track remediation across teams with Campaigns

A response to Microsoft Patch Tuesday or a newly disclosed PHP vulnerability making headlines can span many owners and tasks. Security teams often have to gather updates from tickets and spreadsheets to answer a simple question: how much of the work is done?

Remediation Campaigns, now in Early Access, bring related vulnerability work into a single view, where teams can see the overall status, track progress by team, and identify where follow-up is needed. 

Give access to the assets each team owns

Asset-scoped access control, now in Early Access, lets administrators pair a role with a set of assets. A Windows remediation group, for example, can be given permission to act on Windows assets, while infrastructure leaders can have read access across a broader area.

Scopes support parent and child relationships to reflect an organization’s ownership structure. Administrators can assign roles and scopes to user groups, so access remains manageable as people join or leave teams.

Split, merge, and apply exceptions within Work Items

As teams investigate remediation work, they may find that one Work Item needs to be divided between owners, or that related Work Items should be handled together.

Customers can now split and merge remediation Work Items directly in Action Queue. They can also apply a risk exception to a selected part of a Work Item while continuing to remediate the rest, so an exception covers only the portion they intend to accept.

Create reusable skills and manage automations through General Agent

Security teams regularly revisit the same questions. Has exposure decreased since a patch window? Are there new zero-day risks to investigate? What guidance should a particular team follow?

Teams can now ask the General Agent to create reusable skills that capture the instructions for recurring tasks. Once created, a skill can be run with a slash command in Agent Chat or included in an automation.

Automations can also be listed, created, edited, and deleted through General Agent. Teams can set up and maintain recurring checks through conversation, with an approval step before any new automation is activated.