Optiv Expands Threat Exposure Management Services as Time to Exploit Shrinks to Hours or Days

LEAWOOD, Kan. - Nov. 12, 2026 - Optiv, the world's largest pure-play cybersecurity company, today announced an expansion of its Threat Exposure Management Services to its existing enterprise vulnerability management practice. Clients can now run exposure management across cloud and on-premises environments as one managed program, with fixes confirmed by re-testing.

The time between a vulnerability's public disclosure and its first exploitation has shrunk to days, and in some cases hours, as attackers increasingly use AI to find exposed systems and test exploits in minutes. Most organizations still take weeks to remediate, working from backlogs ranked by severity score. Optiv's Threat Exposure Management Services replace that ranking with continuous testing that shows which exposures an attacker could reach and exploit in the client's environment, and Optiv directs remediation to those first.

Optiv's Threat Exposure Management Services provide:

• Expert-led operations: Optiv practitioners run the platforms and review findings, and client teams receive a prioritized work list instead of raw platform output.
• Risk-based prioritization: Each exposure is assessed for exploitability, existing controls, asset value and business impact.
• Optiv-built AI agents: Agents developed for Optiv Agentic Security Operations correlate findings across scanners, cloud posture tools and validation testing and draft remediation steps for practitioner review.
• Verified remediation: Fixes are re-tested to confirm the exposure is closed, with results reported to security leadership.
• Connected security operations: The services work alongside existing Optiv vulnerability management programs and connect to Optiv Agentic Security Operations, introduced in August, which brings exposure management into the same managed service as detection and response and aligns to Optiv's overall strategy of advise, deploy and operate.

"The most dangerous window is the time between discovering an exposure and fixing it. Because we operate both sides - validation and detection - we don't leave that window unwatched," said Kathryn Hall, senior vice president of services at Optiv. "What we learn testing an attack path becomes a detection rule in the SIEM that same day, so clients are protected while remediation is still underway."

In cloud environments, attackers often chain together exposures that look minor on their own, such as an internet-facing workload, an over-permissioned identity and an accessible data store, to reach sensitive data. Scoring findings one at a time misses that combined risk. Optiv maps cloud exposures into attack paths, identifies the fix that breaks each one and confirms the path is closed after remediation.

"AI has made attackers much faster at finding exposures and chaining them together, and most security programs aren't organized to respond at that speed," said Ben Spencer, product director at Optiv. "Vulnerability management, cloud posture and penetration testing usually sit with different teams on different schedules. Running them as one program lets us see an environment the way an attacker would and give the person who owns the risk a fix they can verify."

For the latest news and updates from Optiv, visit https://www.optiv.com/newsroom.