Mallory Unifies Threat Intelligence and Response with AI-Native Platform
Mallory launches an AI-native Threat and Exposure Management platform integrating threat intelligence, exposure context, and automated response capabilities.
Mallory has introduced a new AI-native Threat and Exposure Management platform designed to unify disparate security functions into a single architecture. The platform aims to provide security teams with faster, more focused responses to evolving threats by correlating attack surface data, threat intelligence, and vulnerability information.
The core of Mallory's offering is a three-part architecture: a context graph that links an organization's attack surface with external threat data and known vulnerabilities; an intelligent reasoning layer that prioritizes threats based on actual risk and adversary activity; and a policy and governance layer that automates actions within defined organizational rules.
This unified approach is intended to move beyond the limitations of point solutions that force security teams to choose between prioritizing exposures, hunting for threats, or building detections. Mallory's platform addresses the upstream problem of understanding what to look for, where to look, and how to act quickly and cost-effectively, especially as AI-assisted attackers compress exploitation timelines.
The context graph ingests attack surface and security configuration data, then merges it with threat intelligence and vulnerability data. This correlation happens rapidly, aiming to assess new CVEs or adversary techniques against an organization's specific exposure within minutes rather than days.
Sitting atop the context graph, the intelligent reasoning layer evaluates whether a threat signal is relevant to the environment, where it might land, and its true impact, moving beyond static severity scores to incorporate real-world adversary behavior.
The policy and governance layer provides granular control over automated actions. This can include auditing code repositories, monitoring supply chain dependencies, evaluating CI/CD configurations, or directly routing prioritized cases into existing ticketing systems, all while maintaining auditable control.
Mallory is also differentiating its consumption model, focusing on coverage and outcomes rather than token usage, and supporting bring-your-own-key (BYOK) options. This approach allows teams to run on their own infrastructure or Mallory's, paying for the software and its results, not just the AI workload.
Founded in 2024 and headquartered in Austin, Texas, Mallory is backed by investors including Decibel Partners, LiveOak Ventures, and Aviso Ventures. The company's vision, as articulated by founder and CEO Jonathan Cran, is to create an intelligent, agentic platform that continuously assesses risk, enabling security teams to focus on what truly matters.