Mondoo Launches Agentic Remediation: Exposure Management That Fixes

Mondoo, the AI-native exposure management platform with agentic remediation, today announced code inspection, external attack surface scanning, enhanced CIS Benchmark remediations, and automated fix delivery through Microsoft Intune and CrowdStrike Falcon. Mondoo now finds exposures across source code, shadow AI, infrastructure and cloud, builds the fix, deploys it through the tools teams already run, and verifies that the risk is gone.

“Security teams expect more from AI than another dashboard of findings. They want it to do the work for them, and do it intelligently. Most vendors tell you what to remediate. Mondoo does the remediation for you. We find what’s exposed, build the fix, deploy it and verify it, while your team decides where AI acts on its own and where it waits for their approval.”

Organizations have never been more exposed. The Forum of Incident Response and Security Teams (FIRST) forecasts around 66,000 new CVEs in 2026, more than 180 a day. At the same time, AI agents and AI-generated code are changing environments faster than security teams can map them, and attackers increasingly exploit assets organizations didn't even know they had.

Finding vulnerabilities is no longer the hard part. Fixing them at the same speed is. Mondoo closes this gap: it covers the attack surface, delivers fixes at the level of autonomy each team chooses, and confirms the risk is eliminated once the fix is deployed.

Key elements of today's announcement include:

• Automated remediation through Microsoft Intune and CrowdStrike Falcon: Mondoo deploys fixes to endpoints through the tools security and IT teams already know and trust, with no new agents or workflows to add.
• Code inspection and remediation: Mondoo scans source code for flaws, vulnerable dependencies, and exposed secrets, and correlates findings with known infrastructure and cloud risk. Developers receive deterministic fixes, AI-assisted fixes, or remediation guidance as GitHub pull requests, in the IDE, and through coding agents. Mondoo then analyzes the revised code within the customer environment to verify the risk is gone.
• External attack surface scanning: Mondoo identifies internet-facing hosts and checks for TLS, DNS, HTTP, and email security exposures, misconfigurations, and known vulnerabilities. Findings include remediation guidance and ongoing monitoring to confirm the risk stays closed.
• Enhanced and extended CIS Benchmark remediations: Mondoo is expanding the fixes available for supported CIS Benchmark checks, including for systems already in production. For qualifying content, Mondoo tests the remediation on a real system and re-scans to confirm the control passes.
• Agentic and human-in-the-loop remediation decisions: Mondoo lets teams set remediation policies based on contextual exposure risk, asset type, and automation appetite, so routine fixes run autonomously, and sensitive systems wait for approval.

Policy as code keeps systems hardened after the fix: if a configuration drifts, Mondoo fixes it again. Teams also get on-demand evidence of what Mondoo found and fixed for compliance and auditing purposes. Customers’ own AI agents can also work with Mondoo directly through the Model Context Protocol (MCP), querying exposures, pulling evidence, and triggering fixes inside existing workflows.

The new capabilities are available now as a platform and as a service. Customers can run them on the Mondoo AI-native platform, or have Mondoo deliver them as Service as Software through its Agentic Managed Vulnerability Service.

Mondoo is demonstrating at it-sa 2026 in Nuremberg, 27 to 29 October, Hall 7, Stand 7-542.

For more info on agentic remediation, visit the Mondoo blog or tune in to the live webinar on October 22nd.