the agentic CISO company
Security that reports.
Security that acts.
amendrail is building the agentic CISO for the enterprise — an autonomous security function that knows what you run, what's exposed, and closes the gap with a plan, a patch, and proof. Its senses are already live: what the bugs, the patch stream your agents read.
Knows the fleet
Continuous inventory and SBOM matching — every component resolved to exact version ranges. No guessing, no stale spreadsheets.
Acts with authority
Plans the upgrade, files the change, applies the patch, verifies the fix — inside approval gates your humans control.
Answers to evidence
Every action is grounded in a normalized issue with a fix pointer and a source. Nothing moves on vibes.
First product, live today: what the bugs.
The patch stream that makes an agentic CISO possible — every CVE, distro advisory, CA distrust event and EOL cycle, deduped and ranked with exact version ranges. Your agents already read it over MCP.
{
"mcpServers": {
"what-the-bugs": {
"type": "http",
"url": "https://whatthebugs.com/mcp"
}
}
}A dashboard tells you you're exposed.
An agent with authority ends the exposure.