Vicarius launches vRx 2.0 to speed vulnerability fixes

Vicarius has launched vRx 2.0, an update to its core vulnerability remediation platform.

The new version combines vulnerability discovery, risk prioritisation, patching, patchless protection, scripting and AI-generated remediation in a single workflow. It is designed to help security teams move more quickly from identifying weaknesses to fixing them or reducing exposure.

The launch comes as organisations continue to struggle with remediation after vulnerabilities have been identified. Vicarius' 2026 State of Vulnerability Remediation report found that 79% of organisations experienced a security incident in the past year involving a vulnerability they already knew about.

The report also found that 58% of remediation activity still requires manual work, only 7% of organisations have fully automated remediation, and 82% cannot consistently fix vulnerabilities within the team that found them.

Vicarius has centred the release on what it calls "True Remediation", which offers several ways to address an exposure rather than relying on patching alone. It argues that patches are often unavailable, too risky to deploy or insufficient to fully address the underlying issue.

Under the updated platform, users can deploy available fixes through vPatch across Windows, macOS, Linux and more than 20,000 third-party applications. Where patches are unavailable or cannot be applied, vShield provides in-memory protection intended to block exploit paths without requiring a reboot.

Another option is vScript, which runs detection and remediation scripts from Vicarius' own library and its vSociety community. A separate function, ScriptAI, generates detection and remediation scripts when no existing option is available, including for vulnerabilities that do not yet have an official patch.

AI-generated scripts are reviewed and approved by a person before deployment to live assets. Vicarius says ScriptAI can generate and validate scripts in under an hour, compared with traditional processes that can take weeks.

Discovery and scoring

The release also expands the company's discovery tools through vRadar, its agentless scanner. The update adds unmanaged device detection and scanning against CIS benchmarks, as well as compliance frameworks including HIPAA, PCI DSS and CMMC.

Alongside this, the vRx agent can provide deeper endpoint visibility where it has been deployed. This combined approach is intended to give security teams broader scanning coverage and more detailed insight into managed systems.

Risk scoring is handled through vScore, which prioritises findings based on exploitability, weaponisation status, asset criticality and business context rather than relying only on CVSS ratings. The platform also reassesses risk after remediation work has been completed.

Vicarius has also added AI grouping, which allows teams to define asset groups in natural language, and vComply, which maps remediation activity to frameworks including CIS Benchmarks, PCI DSS, HIPAA and CMMC. Reporting has also been updated with AI-generated drafts that analysts can shape, annotate and approve before sharing them with leadership teams or auditors.

Broader strategy

The launch builds on a wider product push by Vicarius. Earlier this year, the company introduced vIntelligence, a product focused on continuous validation, orchestration and AI-driven security insight, with native integration into vRx for closed-loop remediation.

ScriptAI was introduced later as a generative AI function within the remediation pipeline. With vRx 2.0, Vicarius brings those elements together with vulnerability discovery and remediation in a single workflow aimed at verifying that fixes have been completed rather than leaving issues open in ticketing systems.

The platform also integrates with existing IT service management, endpoint detection and response, security orchestration and remote monitoring tools, allowing organisations to add it without replacing their existing security stack.

Roi Cohen, Chief Executive Officer at Vicarius, said attackers are already moving faster than most internal remediation processes.

"Attackers already have AI finding and weaponizing vulnerabilities faster than any human team can track. Once you accept that, defending with people and tickets isn't a strategy, it's a delay tactic," Cohen said.

"vRx 2.0 puts AI on our side, moving as fast as the AI on theirs. Not a faster tool for a person to run. A system built to fight at the speed of the attack," he added.