~New AI-powered capability helps security teams investigate, validate and respond to digital threats through policy-governed automation~
New Delhi, August 5, 2026: RiskProfiler, a digital risk protection and external threat intelligence platform, today announced the launch of KnyX Autonomous Investigations, a new capability designed to help organisations automate the investigation, validation and policy-governed response to external cyber threats. The solution is being showcased at Black Hat USA and will also be demonstrated at DEF CON 34 in Las Vegas.
Security teams today face a growing volume of alerts, including look-alike and typosquatted domains, leaked credentials, vendor-breach signals, live phishing pages and threat-intelligence feeds. While detection tools continue to generate alerts, investigating and validating every incident remains a largely manual and time-consuming process, often delaying response and remediation.
KnyX Autonomous Investigations addresses this challenge through a continuous workflow of Alert → Investigate → Verdict → Remediate. AI agents gather the same evidence a human analyst would, generate confidence-scored verdicts and, where customer-defined policies allow, execute or initiate remediation actions.
The agents use deterministic, structured investigation steps rather than relying solely on free-form AI outputs. Each investigation is supported by schema-validated evidence and a comprehensive audit trail, helping make verdicts transparent, reproducible and defensible.
Automation in cybersecurity often requires organisations to balance speed with control. KnyX Autonomous Investigations is designed to help security teams adopt autonomous response while maintaining governance over every action.
Each remediation action follows customer-defined policies, allowing organisations to decide whether it should be executed automatically, routed for approval or remain disabled. Credential validation is performed only for verified customer-owned domains and authorised identity providers. Vendor-breach claims are cross-checked across multiple trusted sources before a response is initiated.
Every investigation records its inputs, outputs, evidence, execution history and the versions of the agents and skills used, providing a complete audit trail for review, governance and compliance.
At launch, KnyX includes autonomous agents for leaked credential investigation and policy-based password resets, look-alike and typosquatted domain investigation, live phishing-page analysis and evidence collection, vendor-breach validation and exposure assessment, and threat-intelligence filtering and prioritisation. Together, these agents can validate compromised credentials, assemble takedown-ready evidence, cross-check breach claims and filter large volumes of threat intelligence based on an organisation’s technology stack, vendor ecosystem and risk environment.
These agents can validate compromised credentials, assemble takedown-ready evidence, cross-check breach claims and filter large volumes of threat intelligence based on an organisation’s technology stack, vendors and risk environment.
“Security teams do not lack detection tools. What they are increasingly drowning in is triage, with the same manual investigations being repeated thousands of times every week,” said Setu Parimi, Co-Founder and CTO of RiskProfiler. “KnyX Autonomous Investigations performs that work the way a senior analyst would and then takes the next step by acting where policy allows. Every step is governed by customer-defined controls and backed by evidence, enabling CISOs to adopt autonomous response without losing oversight.”
“We’ve held back on autonomous response for years because ‘let the tool act on its own’ was never a sentence I could say to my board. KnyX is the first thing that let me turn it on one action at a time, with a policy and an audit trail behind every move. It’s automation I can actually defend.” said Kamran Siddique, CISO at Steve Madden.
KnyX Autonomous Investigation Agents are now available to RiskProfiler customers. RiskProfiler’s founding team will be at Black Hat USA from August 1 to 6 and DEF CON 34 from August 6 to 9 in Las Vegas, conducting live, one-to-one demonstrations of all five agents.
To schedule a demonstration, visit: https://riskprofiler.io/demo
