SureStack unveils AI platform for real-time cyber defence

SureStack has introduced an AI-based cybersecurity platform aimed at helping organisations optimise and validate their cybersecurity stacks in real time.

The platform is built on SureStack's patent-pending "Resilient Intelligence" technology and combines Generative AI, human expertise, and real-time environment analysis. According to the company, this integration is intended to assist security teams in identifying misconfigurations and vulnerabilities that can leave systems open to cyber attacks, while also maximising the efficacy of investments in cybersecurity tools.

Adam Bennett, Co-Founder and Chief Executive Officer of SureStack, said: "Misconfigurations and vulnerabilities inherent in security tools are one of the leading vectors of cyber attacks, and today's cybersecurity teams are overwhelmed, with even well-funded organisations continuing to suffer incidents and breaches. SureStack was built to help defenders reclaim control — ensuring that every tool in their security stack is properly configured, continuously validated, up-to-date, and working optimally to protect from cyber attacks."

Elaborating on the value proposition, Austin Hochstedler, Co-Founder and Chief Technology Officer of SureStack, stated: "Building a good security stack isn't enough — you need to constantly verify that it's still protecting you as the environment and cyber threats evolve. SureStack delivers real-time visibility into live configurations and vulnerabilities, giving security teams the clarity they need to stay ahead of attackers and focus their efforts where they can do the most good."

SureStack integrates with a range of existing cybersecurity tools used by organisations, including firewalls, endpoint protection, authentication services, Security Information and Event Management (SIEM), ticketing systems, email security, and vulnerability management solutions. The system continuously monitors configurations for deviations, misconfigurations, vulnerabilities, and security gaps, delivering alerts and updates through its dashboard interface.

Integration partners at launch include CrowdStrike, Fortinet, Palo Alto, Sonic Wall, and Trellix. The company has indicated that additional integrations are in development.

The platform's features include StackChat, an AI-powered cybersecurity assistant designed to support users in real time. StackChat allows security professionals to query live environments, troubleshoot problems, and access information about deployed tools, configurations, and policies. SureStack says that by providing a unified knowledge base, StackChat helps decrease training periods, improve operational efficiency, and support faster resolution of issues.

Other capabilities within SureStack comprise real-time validation of stacks against known threats and vulnerabilities, daily monitoring of external threat landscapes for new vulnerabilities related to the user's security stack, and regular data collection from sources such as security vendor websites, the National Institute of Standards and Technology (NIST), and vulnerability databases.

An automated grading system is also included to help defenders identify priorities and act on the changes that could most quickly reduce risk. The platform also enables adversarial attack simulations, validating whether current configurations would mitigate common threat tactics and vulnerabilities, referencing the MITRE ATT&CK framework as a benchmark.

SureStack provisions each customer with a private tenant and provides several deployment and hosting options. Organisations with strict compliance or sovereignty needs can choose self-hosted environments.

The service is available with tiered pricing structures catering to managed service providers (MSPs), managed security service providers (MSSPs), mid-sized organisations, large enterprises, and government bodies.

The founding team at SureStack brings experience from sectors including defence, intelligence, healthcare, and financial services. Insights from defending high-target environments are embedded in the platform's methodology.