Alfred AI is an internally built engine by Detectify designed to autonomously discover and build tests for Common Vulnerabilities and Exposures (CVEs) that are relevant to its customers. Many Application Security (AppSec) teams depend on automated scanners to identify publicly known CVEs, but these scanners can be slow to discover and develop tests for new vulnerabilities. Alfred addresses this issue by continuously scouring the internet for emerging threats and reviewing trusted sources for vulnerability data. It prioritizes relevance by focusing on exploitability and ranking vulnerabilities based on their potential impact on customers. The AI enriches vulnerability data with detailed information and re-evaluates its research as new insights emerge. Alfred engineers tests by analyzing publicly available proofs-of-concept and other technical information. It transforms complex security research into actionable tests by building payload-based exploits to test for vulnerabilities. To ensure the quality of its output, Alfred's tests are meticulously reviewed by Detectify's security researchers, who apply the same stringent standards used for their own work and for proofs-of-concept submitted by the ethical hacker community, Crowdsource. This collaborative approach ensures that the vulnerability testing is continuous, efficient, and reliable. By handling common threats, Alfred enables Detectify's researchers to focus on discovering novel vulnerabilities. Together with the Crowdsource community, it helps organizations stay ahead of potential threats, providing continuous, efficient, and reliable vulnerability testing.

Features & Benefits

• Autonomous Vulnerability Discovery
  • Alfred autonomously discovers and builds tests for CVEs relevant to Detectify's customers.
• Continuous Monitoring
  • Scours the internet for emerging threats and reviews trusted sources for vulnerability data.
• Prioritized Relevance
  • Ranks vulnerabilities based on exploitability and potential impact on customers.
• Automated Test Engineering
  • Transforms complex security research into actionable tests by building payload-based exploits.
• Human-Reviewed Quality
  • Tests are meticulously reviewed by Detectify's security researchers.
• Enhanced Research Focus
  • By handling common threats, Alfred enables Detectify's researchers to focus on discovering novel vulnerabilities.