Qevlar’s new AI agents correlate CVEs, incident data, and active exploitation signals

Qevlar announced a suite of AI agents to bridge SOCs and vulnerability management by correlating CVE data with live incident signals for real-time prioritization, automatically identifying asset owners, and autonomously hunting for active CVE exploitation; general availability is slated for Fall 2026. The announcement frames these capabilities against a shifting threat landscape—citing a 2026 Mandiant finding that mean time to exploit has fallen to an estimated -7 days and noting AI tools are accelerating zero-day identification and operationalization—arguing that tighter integration between teams is needed to compress response windows.