RiskProfiler launches KnyX for automated cyber response

RiskProfiler has launched KnyX Autonomous Investigations, a product designed to automate investigation and response for external cyber threats.

The system is intended to help security teams manage large volumes of alerts that still require manual review before action can be taken. These alerts can include leaked credentials, phishing pages, look-alike domains, vendor-breach signals and threat-intelligence feeds.

KnyX follows a workflow of alert, investigation, verdict and remediation. RiskProfiler says it uses AI agents to collect evidence, produce confidence-scored verdicts and execute or initiate response actions when customer policies allow.

The product uses deterministic investigation workflows rather than relying solely on open-ended AI outputs. Each case includes schema-validated evidence and an audit trail intended to make results transparent and reproducible.

That focus reflects a broader issue in cybersecurity: companies want faster threat response but remain wary of giving automated systems full decision-making authority. Customers can decide whether a remediation step is carried out automatically, sent for approval or left disabled.

In some cases, RiskProfiler has set limits on how actions are taken. Credential validation is restricted to verified customer-owned domains and authorised identity providers, while vendor-breach claims are checked against multiple trusted sources before a response begins.

Launch scope

At launch, KnyX includes agents for leaked credential investigation and policy-based password resets, look-alike and typosquatted domain investigation, phishing-page analysis and evidence collection, vendor-breach validation and exposure assessment, and threat-intelligence filtering and prioritisation.

According to RiskProfiler, these agents can validate compromised credentials, compile evidence for takedown efforts, cross-check breach claims and filter threat-intelligence volumes based on a customer's technology stack, vendor ecosystem and broader risk environment.

The release is positioned as a step beyond security tools that mainly generate alerts. The commercial case is that many organisations have already invested in detection but still rely on analysts to repeat similar triage work at scale.

Setu Parimi made that point as the company introduced the product.

"Security teams do not lack detection tools. What they are increasingly drowning in is triage, with the same manual investigations being repeated thousands of times every week," said Setu Parimi, Co-Founder & CTO, RiskProfiler. "KnyX Autonomous Investigations performs that work the way a senior analyst would and then takes the next step by acting where policy allows. Every step is governed by customer-defined controls and backed by evidence, enabling CISOs to adopt autonomous response without losing oversight."

The emphasis on governance also appeared in comments from an early user. For many security leaders, the concern is not only whether an automated system can identify a threat, but whether its actions can be explained to internal management and auditors.

"We've held back on autonomous response for years because 'let the tool act on its own' was never a sentence I could say to my board. KnyX is the first thing that let me turn it on one action at a time, with a policy and an audit trail behind every move. It's automation I can actually defend," said Kamran Siddique, CISO, Steve Madden.

Every investigation records its inputs, outputs, evidence, execution history, and the versions of the agents and skills used. That record is intended to support internal review, governance processes and compliance requirements.

The launch comes as security operations teams face pressure to sift through growing volumes of external threat data without expanding analyst headcount at the same pace. Vendors across the sector have promoted AI-led products as a way to reduce repetitive work, though customers have often demanded clearer controls over what those systems can do without human sign-off.

KnyX Autonomous Investigation Agents are now available to RiskProfiler customers.