Dux

Dux is an agentic exposure management platform built for the speed of AI driven cyberattacks, founded by three graduates of the IDF's elite Talpiot program and launched from stealth in December 2025 with a nine million dollar seed led by Redpoint, TLV Partners, and Maple Capital. Its framing problem is that the window between vulnerability disclosure and exploitation has collapsed, with Mandiant reporting average time to exploit falling from thirty two days to five in two years, a trend the company ties to attackers using agentic AI, citing Anthropic's documentation of the first real world AI orchestrated cyber espionage campaign. Against that, periodic scans, long remediation cycles, and manual prioritization no longer keep pace.

Dux replaces that model with continuous, agentic investigation. Its AI workers continuously analyze exploitability across the entire environment to determine what an attacker can realistically use, check whether existing controls already block a given attack path, surface lightweight mitigations such as configuration or control changes that eliminate risk faster than a full patch, and route targeted remediation to the right asset owners only when necessary. Because most scanner findings are not exploitable once real context is accounted for, the company argues, the value is in applying expert, environment specific reasoning to every vulnerability and asset every time, rather than generating another prioritized alert list. The result it claims is a materially smaller attack surface and a far shorter path from discovery to resolution, with customers spinning up AI workers to investigate a fresh zero day across their environment within minutes. The platform aligns with Gartner's Continuous Threat Exposure Management framework but applies it through AI workers.

Dux fits enterprise security teams overwhelmed by assets, scanners, and vulnerabilities who want to focus on provable exploitability and fast, control aware mitigation. It is a direct comparison to other agentic exposure management entrants and a weaker fit for buyers wanting published pricing or a developer platform.